Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    3663d85dd88e9aa646eb690baec42a41a6e280eafe783c0a0418faea0a1eb38e

  • Size

    250KB

  • Sample

    220914-aw7snsghe9

  • MD5

    46ae77b245f05ef738fbbb79eb34af08

  • SHA1

    db4969e9596e285bc88ddcb068876413af685bdd

  • SHA256

    3663d85dd88e9aa646eb690baec42a41a6e280eafe783c0a0418faea0a1eb38e

  • SHA512

    5261420741c2f1f0f0a5ab91b08fe391e544bf067e1d93f706d55df4bd214aea4da0820371316c06920a60bda69709fdaeeb0784a03d9aa8f052c0f64ea5cbb6

  • SSDEEP

    6144:Bm2/J0NoXFVsJFXzY/Gt/3J8wIrkj/J4vfNm:Q40OXFVsJFXoGtx8wIQzJIf

Malware Config

Targets

    • Target

      3663d85dd88e9aa646eb690baec42a41a6e280eafe783c0a0418faea0a1eb38e

    • Size

      250KB

    • MD5

      46ae77b245f05ef738fbbb79eb34af08

    • SHA1

      db4969e9596e285bc88ddcb068876413af685bdd

    • SHA256

      3663d85dd88e9aa646eb690baec42a41a6e280eafe783c0a0418faea0a1eb38e

    • SHA512

      5261420741c2f1f0f0a5ab91b08fe391e544bf067e1d93f706d55df4bd214aea4da0820371316c06920a60bda69709fdaeeb0784a03d9aa8f052c0f64ea5cbb6

    • SSDEEP

      6144:Bm2/J0NoXFVsJFXzY/Gt/3J8wIrkj/J4vfNm:Q40OXFVsJFXoGtx8wIQzJIf

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks