Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    f28a604bee55882d1f62a99c0cbdcb58943e9e4682dd85c78f9c2256566f70f5

  • Size

    292KB

  • Sample

    220929-ldqbfsbchk

  • MD5

    f0898df28bae43577f44131db4fc2eb4

  • SHA1

    3d51fde65e5ad3201bcee9f170e679b8903aea07

  • SHA256

    f28a604bee55882d1f62a99c0cbdcb58943e9e4682dd85c78f9c2256566f70f5

  • SHA512

    e2bed745bb87afb315f653161aa665f7c0871717da833f164bb72f6113a9d948fb02adb2b2c7a114cf7a5e218e818a8103a27028a4374de35d3ebcfb4277b87f

  • SSDEEP

    3072:JXhHyJTgN7umqow5V35QX6ey8zwnjz5KLhBQV3Y82F0nFV1AcoqS+0K4M/h3JpZz:thOTcqow58X6eCzk27r/1nj0RwwVfgt

Malware Config

Targets

    • Target

      f28a604bee55882d1f62a99c0cbdcb58943e9e4682dd85c78f9c2256566f70f5

    • Size

      292KB

    • MD5

      f0898df28bae43577f44131db4fc2eb4

    • SHA1

      3d51fde65e5ad3201bcee9f170e679b8903aea07

    • SHA256

      f28a604bee55882d1f62a99c0cbdcb58943e9e4682dd85c78f9c2256566f70f5

    • SHA512

      e2bed745bb87afb315f653161aa665f7c0871717da833f164bb72f6113a9d948fb02adb2b2c7a114cf7a5e218e818a8103a27028a4374de35d3ebcfb4277b87f

    • SSDEEP

      3072:JXhHyJTgN7umqow5V35QX6ey8zwnjz5KLhBQV3Y82F0nFV1AcoqS+0K4M/h3JpZz:thOTcqow58X6eCzk27r/1nj0RwwVfgt

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Deletes itself

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks