Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    c90e528ce18ee27184b82df15d5d1d8312fc9254f7cda125f3a0ca5b4abf3efa

  • Size

    272KB

  • Sample

    221005-hs47dadghl

  • MD5

    1b3028d5d84336c03134a38d33b75c8c

  • SHA1

    a2b7346d8bd8ad85a37570e0e0c8e140955bceb4

  • SHA256

    c90e528ce18ee27184b82df15d5d1d8312fc9254f7cda125f3a0ca5b4abf3efa

  • SHA512

    08ce2295e7e9b1ebd458d11e1522529c77e348d394a0d197f032dd0aa3d9cac928b3c974284ae39b5638b4a2440dca513956ec83adb253441ce93a1304730f01

  • SSDEEP

    6144:sSts8K1LVboC5DMQ6vayuzbgwuUnXxagTQwVf:sSZK15bosMJ/unn3v

Malware Config

Targets

    • Target

      c90e528ce18ee27184b82df15d5d1d8312fc9254f7cda125f3a0ca5b4abf3efa

    • Size

      272KB

    • MD5

      1b3028d5d84336c03134a38d33b75c8c

    • SHA1

      a2b7346d8bd8ad85a37570e0e0c8e140955bceb4

    • SHA256

      c90e528ce18ee27184b82df15d5d1d8312fc9254f7cda125f3a0ca5b4abf3efa

    • SHA512

      08ce2295e7e9b1ebd458d11e1522529c77e348d394a0d197f032dd0aa3d9cac928b3c974284ae39b5638b4a2440dca513956ec83adb253441ce93a1304730f01

    • SSDEEP

      6144:sSts8K1LVboC5DMQ6vayuzbgwuUnXxagTQwVf:sSZK15bosMJ/unn3v

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Deletes itself

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks