Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    bbebe5018f41b45da3ba94b2d1a8971f739cd8b519426a7a694a30ae70805da0

  • Size

    211KB

  • Sample

    221011-enyx1sdfh6

  • MD5

    35cd593da9e9a2af2945f4e4771fe39e

  • SHA1

    25b32cd0b408c9d529588efda2ec29ecd7792c35

  • SHA256

    bbebe5018f41b45da3ba94b2d1a8971f739cd8b519426a7a694a30ae70805da0

  • SHA512

    4812f11d48a90ff87f992cd4945a01bbaad184b5300c19b14dcd7b291624aea5820fd5b7c357ab8682f850b511b0b7cf3745c6e527b97cd7a98d9588ea49beb4

  • SSDEEP

    3072:e27OO3jBU/FGzLJrj5jRFUcHC+6QHME5J2s64KG0D7ZrP9d+a/6oO:euM6LJ/5FQQME5wscG0hR7/6o

Malware Config

Targets

    • Target

      bbebe5018f41b45da3ba94b2d1a8971f739cd8b519426a7a694a30ae70805da0

    • Size

      211KB

    • MD5

      35cd593da9e9a2af2945f4e4771fe39e

    • SHA1

      25b32cd0b408c9d529588efda2ec29ecd7792c35

    • SHA256

      bbebe5018f41b45da3ba94b2d1a8971f739cd8b519426a7a694a30ae70805da0

    • SHA512

      4812f11d48a90ff87f992cd4945a01bbaad184b5300c19b14dcd7b291624aea5820fd5b7c357ab8682f850b511b0b7cf3745c6e527b97cd7a98d9588ea49beb4

    • SSDEEP

      3072:e27OO3jBU/FGzLJrj5jRFUcHC+6QHME5J2s64KG0D7ZrP9d+a/6oO:euM6LJ/5FQQME5wscG0hR7/6o

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Deletes itself

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks