Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    file.exe

  • Size

    300KB

  • Sample

    220917-dt6z5shaf6

  • MD5

    584b78ef69431b38b3118f8349b2d278

  • SHA1

    8a89c4ce82cc2f8d0ade808753cd23ab4c0ff2f5

  • SHA256

    8e11ab9affe9d5c9adce3088b154d9a4b5edeedf2ea048add9140efdf32ac4e5

  • SHA512

    c4d8159df012ca1be198f13d31f5b0d0003af09fd918db9b317c57ab385c3eddbba5faae054a0afbd58964d5ca48a2c1165082509b3129a1d2a268a9193e3420

  • SSDEEP

    3072:6FX7GtdGqb+TgL0G6WgJu9R/Wy/uySydbeTAYGOlnronqu3O0KMgYm7DHOM/h3B0:C7GXL0xWo82zln8qu3O07QOnigabwVf

Malware Config

Targets

    • Target

      file.exe

    • Size

      300KB

    • MD5

      584b78ef69431b38b3118f8349b2d278

    • SHA1

      8a89c4ce82cc2f8d0ade808753cd23ab4c0ff2f5

    • SHA256

      8e11ab9affe9d5c9adce3088b154d9a4b5edeedf2ea048add9140efdf32ac4e5

    • SHA512

      c4d8159df012ca1be198f13d31f5b0d0003af09fd918db9b317c57ab385c3eddbba5faae054a0afbd58964d5ca48a2c1165082509b3129a1d2a268a9193e3420

    • SSDEEP

      3072:6FX7GtdGqb+TgL0G6WgJu9R/Wy/uySydbeTAYGOlnronqu3O0KMgYm7DHOM/h3B0:C7GXL0xWo82zln8qu3O07QOnigabwVf

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks