Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    21d760a233d867f97be0f079136772d6548ab7d702814254aa08911b2b89d62e

  • Size

    250KB

  • Sample

    220915-yd5glahfgk

  • MD5

    42286a9d208a77b6bfa5c0d537c19b9c

  • SHA1

    919e7d08f72ad63d6a5492b25b2ca0b87e26e514

  • SHA256

    21d760a233d867f97be0f079136772d6548ab7d702814254aa08911b2b89d62e

  • SHA512

    001f5edfb22666da98269a251bc610cd2c1a3022e006cc33439c398b636e891e9e207947042fd5887b212b09c9527c91231db9315b2adc0791a761ffd7751d2d

  • SSDEEP

    3072:+XMQaFpVMLrtfx+kg5xWKU7S+PZUnwunPfW4gLdUv90KjHtPTAk4M/h3BsxkgaB/:G/LrhxoK7nPKNnnI5C902t4niga

Malware Config

Targets

    • Target

      21d760a233d867f97be0f079136772d6548ab7d702814254aa08911b2b89d62e

    • Size

      250KB

    • MD5

      42286a9d208a77b6bfa5c0d537c19b9c

    • SHA1

      919e7d08f72ad63d6a5492b25b2ca0b87e26e514

    • SHA256

      21d760a233d867f97be0f079136772d6548ab7d702814254aa08911b2b89d62e

    • SHA512

      001f5edfb22666da98269a251bc610cd2c1a3022e006cc33439c398b636e891e9e207947042fd5887b212b09c9527c91231db9315b2adc0791a761ffd7751d2d

    • SSDEEP

      3072:+XMQaFpVMLrtfx+kg5xWKU7S+PZUnwunPfW4gLdUv90KjHtPTAk4M/h3BsxkgaB/:G/LrhxoK7nPKNnnI5C902t4niga

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks