Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    7c551c2816ea32d34c3f8ae27f272aa8f47db325e988e3ba58b4fc0e5cf9ca89

  • Size

    146KB

  • Sample

    221006-3avkfabae7

  • MD5

    70835f6f2347215ea2c9351b68e7d226

  • SHA1

    33d55b8e7374fda605c8ef5ec0612e01dfbbad78

  • SHA256

    7c551c2816ea32d34c3f8ae27f272aa8f47db325e988e3ba58b4fc0e5cf9ca89

  • SHA512

    527d7d32d4d32955efc0be9879b2396f3b47424b5f5fa9b8489a5cbcbdc1930208225581063e1dd5e69444beb8dcef0b0d20243586ef6c8ef9cab376b59a2258

  • SSDEEP

    3072:Q72gILEswElQxOtpEwI+ZgId5Vk++QUUyO:Q7yLEsex62+6Gjy

Malware Config

Targets

    • Target

      7c551c2816ea32d34c3f8ae27f272aa8f47db325e988e3ba58b4fc0e5cf9ca89

    • Size

      146KB

    • MD5

      70835f6f2347215ea2c9351b68e7d226

    • SHA1

      33d55b8e7374fda605c8ef5ec0612e01dfbbad78

    • SHA256

      7c551c2816ea32d34c3f8ae27f272aa8f47db325e988e3ba58b4fc0e5cf9ca89

    • SHA512

      527d7d32d4d32955efc0be9879b2396f3b47424b5f5fa9b8489a5cbcbdc1930208225581063e1dd5e69444beb8dcef0b0d20243586ef6c8ef9cab376b59a2258

    • SSDEEP

      3072:Q72gILEswElQxOtpEwI+ZgId5Vk++QUUyO:Q7yLEsex62+6Gjy

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Executes dropped EXE

    • Deletes itself

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks