Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    ce294aace226cc1680c0e129596af43c930720056ca84aa8d4d4e8aabd38d574

  • Size

    200KB

  • Sample

    220924-htggpscagl

  • MD5

    1ea42633c17373b7f8f406c6b9d5c3aa

  • SHA1

    38c71989a34c609788815411526a5b432cd5aa45

  • SHA256

    ce294aace226cc1680c0e129596af43c930720056ca84aa8d4d4e8aabd38d574

  • SHA512

    94b04ed845b9e74d9c549eb2ba924f4a6866b9ee43be92c6541c9d43e7a3ac89f71b4f4ef982ac23dc88363c368854b1b5271db80387fd63b1b0ee480be418e4

  • SSDEEP

    3072:TwuHp/TLZ/76o85R4Bd1sIQf1ZZyVAXEa+bd2Bcy/Pkk4x:Tl7Lp6i1spf1HZwd

Malware Config

Targets

    • Target

      ce294aace226cc1680c0e129596af43c930720056ca84aa8d4d4e8aabd38d574

    • Size

      200KB

    • MD5

      1ea42633c17373b7f8f406c6b9d5c3aa

    • SHA1

      38c71989a34c609788815411526a5b432cd5aa45

    • SHA256

      ce294aace226cc1680c0e129596af43c930720056ca84aa8d4d4e8aabd38d574

    • SHA512

      94b04ed845b9e74d9c549eb2ba924f4a6866b9ee43be92c6541c9d43e7a3ac89f71b4f4ef982ac23dc88363c368854b1b5271db80387fd63b1b0ee480be418e4

    • SSDEEP

      3072:TwuHp/TLZ/76o85R4Bd1sIQf1ZZyVAXEa+bd2Bcy/Pkk4x:Tl7Lp6i1spf1HZwd

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks