Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

10/10/2022, 17:14

221010-vsblaacfb2 10

General

  • Target

    d9ede25d1e32be2b41ee6e18cd203db118ea970ba6b87b5b9f23560f4be7fcd4

  • Size

    276KB

  • Sample

    221010-vsblaacfb2

  • MD5

    79877139f777199ce00c15bbe105b26f

  • SHA1

    d719b955184ab97663671020347c3e746a61c632

  • SHA256

    d9ede25d1e32be2b41ee6e18cd203db118ea970ba6b87b5b9f23560f4be7fcd4

  • SHA512

    05717665ce60a2eb8a9f55775a862fac9d1e1f3516731591872f836b7ff6453305c4244ee6b9b8ff685a4a06e9a190165402faaa358aa6399073e32e443cc276

  • SSDEEP

    3072:+XrNWLV75AUnTridz4q5fzxKnQa5P9pZhL8bM/h3qpZa9uD6VdyhkhUuS:GZWLVtAUAsY1RalHZmrwVfquS

Malware Config

Targets

    • Target

      d9ede25d1e32be2b41ee6e18cd203db118ea970ba6b87b5b9f23560f4be7fcd4

    • Size

      276KB

    • MD5

      79877139f777199ce00c15bbe105b26f

    • SHA1

      d719b955184ab97663671020347c3e746a61c632

    • SHA256

      d9ede25d1e32be2b41ee6e18cd203db118ea970ba6b87b5b9f23560f4be7fcd4

    • SHA512

      05717665ce60a2eb8a9f55775a862fac9d1e1f3516731591872f836b7ff6453305c4244ee6b9b8ff685a4a06e9a190165402faaa358aa6399073e32e443cc276

    • SSDEEP

      3072:+XrNWLV75AUnTridz4q5fzxKnQa5P9pZhL8bM/h3qpZa9uD6VdyhkhUuS:GZWLVtAUAsY1RalHZmrwVfquS

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Deletes itself

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks