Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a86288c9fde68312414059a271d020f99a17a5d54bae3ac2b5d090e8a25a4c6c

  • Size

    202KB

  • Sample

    220925-rwhl8afaf2

  • MD5

    a4e3953b97ab5469ce1271c81eec1def

  • SHA1

    2676318bc1b0e13c218a98d8bfb230d48c63f32b

  • SHA256

    a86288c9fde68312414059a271d020f99a17a5d54bae3ac2b5d090e8a25a4c6c

  • SHA512

    f0fe2edb32d93ccaff4d30978bce83c0d21bb4efee4dce5490a6ee97c0af07b77174dcfa7085d5af476a253024511cf783019d8df50777e68487afadcfa2b52d

  • SSDEEP

    3072:4WXyFmhc70j5CDwcEsvMl8YpCpaTxC/JCUuEBCbSX+/PkzXx:ctZREPlpCps+J/c

Malware Config

Targets

    • Target

      a86288c9fde68312414059a271d020f99a17a5d54bae3ac2b5d090e8a25a4c6c

    • Size

      202KB

    • MD5

      a4e3953b97ab5469ce1271c81eec1def

    • SHA1

      2676318bc1b0e13c218a98d8bfb230d48c63f32b

    • SHA256

      a86288c9fde68312414059a271d020f99a17a5d54bae3ac2b5d090e8a25a4c6c

    • SHA512

      f0fe2edb32d93ccaff4d30978bce83c0d21bb4efee4dce5490a6ee97c0af07b77174dcfa7085d5af476a253024511cf783019d8df50777e68487afadcfa2b52d

    • SSDEEP

      3072:4WXyFmhc70j5CDwcEsvMl8YpCpaTxC/JCUuEBCbSX+/PkzXx:ctZREPlpCps+J/c

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks