Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    ebdebba349aba676e9739df18c503ab8c16c7fa1b853fd183f0a005c0e4f68ae

  • Size

    243KB

  • Sample

    221004-v7a83acaar

  • MD5

    fbf436cc098c1ce16f1d35927f3a1d52

  • SHA1

    daf887fb5c01a259c6a9fd79e35dc2da7269aabd

  • SHA256

    ebdebba349aba676e9739df18c503ab8c16c7fa1b853fd183f0a005c0e4f68ae

  • SHA512

    171ce16920b8b250d96a4cfdfefb5a5e7d3fc17ca677a7328f9d910a1e7a820e7e286597bf7a4b6cc1ca02e0166335ea1b5b42526a65df00cad3e93fe252cce4

  • SSDEEP

    1536:rTqzO8/IR2l52sdMBtF07BFhdkkpNh3NgSARDpsoCkpdDtU/05U+Np09IX5ax42:r27xissghPHNg2oJZtJ5UOvp32

Malware Config

Targets

    • Target

      ebdebba349aba676e9739df18c503ab8c16c7fa1b853fd183f0a005c0e4f68ae

    • Size

      243KB

    • MD5

      fbf436cc098c1ce16f1d35927f3a1d52

    • SHA1

      daf887fb5c01a259c6a9fd79e35dc2da7269aabd

    • SHA256

      ebdebba349aba676e9739df18c503ab8c16c7fa1b853fd183f0a005c0e4f68ae

    • SHA512

      171ce16920b8b250d96a4cfdfefb5a5e7d3fc17ca677a7328f9d910a1e7a820e7e286597bf7a4b6cc1ca02e0166335ea1b5b42526a65df00cad3e93fe252cce4

    • SSDEEP

      1536:rTqzO8/IR2l52sdMBtF07BFhdkkpNh3NgSARDpsoCkpdDtU/05U+Np09IX5ax42:r27xissghPHNg2oJZtJ5UOvp32

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v6

Tasks