Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    8b43bfa0edf882141e73f0f3816e64850ec3d9d6266797af42425a9e7787b58e

  • Size

    199KB

  • Sample

    220924-dksq6abgep

  • MD5

    c2aa326829221b741b57e5978fce0221

  • SHA1

    e7e8ac23348ff98e8b2cdcdfd3e3031ab24ef881

  • SHA256

    8b43bfa0edf882141e73f0f3816e64850ec3d9d6266797af42425a9e7787b58e

  • SHA512

    d19dded06de051f3a0c84ed20e2fec88bc0498edbb3f24b302f32a3dbcf3881714d4b16d87aeba5528c57500c6f355862bf454a976610f9a257ccd37608308b6

  • SSDEEP

    3072:dwSXtbXLBvTn485Y9dmWrhVXrqjiLxqAoyBlMf8/Pkj4x:dlrLZnmmwx+iFq

Malware Config

Targets

    • Target

      8b43bfa0edf882141e73f0f3816e64850ec3d9d6266797af42425a9e7787b58e

    • Size

      199KB

    • MD5

      c2aa326829221b741b57e5978fce0221

    • SHA1

      e7e8ac23348ff98e8b2cdcdfd3e3031ab24ef881

    • SHA256

      8b43bfa0edf882141e73f0f3816e64850ec3d9d6266797af42425a9e7787b58e

    • SHA512

      d19dded06de051f3a0c84ed20e2fec88bc0498edbb3f24b302f32a3dbcf3881714d4b16d87aeba5528c57500c6f355862bf454a976610f9a257ccd37608308b6

    • SSDEEP

      3072:dwSXtbXLBvTn485Y9dmWrhVXrqjiLxqAoyBlMf8/Pkj4x:dlrLZnmmwx+iFq

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks