Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    332836430bde93dd2667a740c610cb1eb68113b75002d11d59cf8bbb10922636

  • Size

    249KB

  • Sample

    220915-hvlstacbh2

  • MD5

    57eb688bda1cb14ea97e4f1396d17c23

  • SHA1

    cee43a88cccef7c2d55a2d4fb07060ca87b06ee6

  • SHA256

    332836430bde93dd2667a740c610cb1eb68113b75002d11d59cf8bbb10922636

  • SHA512

    e20f300e0b005b244ff3c56d07efe17e7b7f381be407d539d6e270534613e9e5e4cf43141fbaa3438ded3c84140c6b3fdc94589b9b49903c0d799f36968bd7aa

  • SSDEEP

    3072:CXM5cteGug3ULJ8TNAN525ml9S4YG/MvQfgU40KtDVfB0gM/h3BsxkgaBChUYu:C1enSULJEN1scTG/WC20OD9niga

Malware Config

Targets

    • Target

      332836430bde93dd2667a740c610cb1eb68113b75002d11d59cf8bbb10922636

    • Size

      249KB

    • MD5

      57eb688bda1cb14ea97e4f1396d17c23

    • SHA1

      cee43a88cccef7c2d55a2d4fb07060ca87b06ee6

    • SHA256

      332836430bde93dd2667a740c610cb1eb68113b75002d11d59cf8bbb10922636

    • SHA512

      e20f300e0b005b244ff3c56d07efe17e7b7f381be407d539d6e270534613e9e5e4cf43141fbaa3438ded3c84140c6b3fdc94589b9b49903c0d799f36968bd7aa

    • SSDEEP

      3072:CXM5cteGug3ULJ8TNAN525ml9S4YG/MvQfgU40KtDVfB0gM/h3BsxkgaBChUYu:C1enSULJEN1scTG/WC20OD9niga

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks