Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2577c35a923b7d4302d4b5b18f5183836ee5ed565f8e5f2aa20fb526148a2482

  • Size

    267KB

  • Sample

    221007-fwn88abfd5

  • MD5

    bce91c503c547f6063beb60ae01f4169

  • SHA1

    4a4f833b2ddd8b3f0389ecbff2b8f08c445058cc

  • SHA256

    2577c35a923b7d4302d4b5b18f5183836ee5ed565f8e5f2aa20fb526148a2482

  • SHA512

    1493d0b2c9925e8b630403ea54061e64f72e5e2dcdae98ca9f6d43284d0ba243ef13d3f908310e1b8ec08499ca5ce46b65fbd53b91e0212a20984e539ec471eb

  • SSDEEP

    3072:3XYAhpLDUIwM/tZx5C1dXj3Rg7noOWrxpzbgqruNRV/LpZa9uD6VdyhkURv4LR:nvyM/anCuzbgwuNn/LwVfU

Malware Config

Targets

    • Target

      2577c35a923b7d4302d4b5b18f5183836ee5ed565f8e5f2aa20fb526148a2482

    • Size

      267KB

    • MD5

      bce91c503c547f6063beb60ae01f4169

    • SHA1

      4a4f833b2ddd8b3f0389ecbff2b8f08c445058cc

    • SHA256

      2577c35a923b7d4302d4b5b18f5183836ee5ed565f8e5f2aa20fb526148a2482

    • SHA512

      1493d0b2c9925e8b630403ea54061e64f72e5e2dcdae98ca9f6d43284d0ba243ef13d3f908310e1b8ec08499ca5ce46b65fbd53b91e0212a20984e539ec471eb

    • SSDEEP

      3072:3XYAhpLDUIwM/tZx5C1dXj3Rg7noOWrxpzbgqruNRV/LpZa9uD6VdyhkURv4LR:nvyM/anCuzbgwuNn/LwVfU

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks