Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    6f2410f23be7f75785e648661212f00c6cd4eab16c7fed75072bfa8a3ae7718c

  • Size

    270KB

  • Sample

    221008-y4qfcsfeb9

  • MD5

    a1a3cdd23bad08838b4d67b32cbb9a27

  • SHA1

    33f402a495effca289297f19995b45de5ffd87ed

  • SHA256

    6f2410f23be7f75785e648661212f00c6cd4eab16c7fed75072bfa8a3ae7718c

  • SHA512

    acee29fd2e4a372141a2072dd61d36ac26b55d39ee9406a2be5560c6232d9c669e7037bb310558d4ca8762af35d5d431f64235e84cd12fcb180b82ef351a13ab

  • SSDEEP

    3072:VaXKAB+s4+zbMqQ0YRahe8hv3PCgh5I23wGgyfj2zRGuxmqTqkoeF25M/h3qpZaL:oVB+slW9Rkv3j3ZFGMm3qkoeFArwVfX

Malware Config

Targets

    • Target

      6f2410f23be7f75785e648661212f00c6cd4eab16c7fed75072bfa8a3ae7718c

    • Size

      270KB

    • MD5

      a1a3cdd23bad08838b4d67b32cbb9a27

    • SHA1

      33f402a495effca289297f19995b45de5ffd87ed

    • SHA256

      6f2410f23be7f75785e648661212f00c6cd4eab16c7fed75072bfa8a3ae7718c

    • SHA512

      acee29fd2e4a372141a2072dd61d36ac26b55d39ee9406a2be5560c6232d9c669e7037bb310558d4ca8762af35d5d431f64235e84cd12fcb180b82ef351a13ab

    • SSDEEP

      3072:VaXKAB+s4+zbMqQ0YRahe8hv3PCgh5I23wGgyfj2zRGuxmqTqkoeF25M/h3qpZaL:oVB+slW9Rkv3j3ZFGMm3qkoeFArwVfX

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Deletes itself

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks