Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    db7ebed9bebb7b6c2518444fdd81d167cf296e8e9676455e09586b08c04f9c2f

  • Size

    214KB

  • Sample

    221015-scl1zafgbq

  • MD5

    97fe1accb9d7fe5e6e434d116934b173

  • SHA1

    2a63de161c4efc33619e64072006377b63b2fa34

  • SHA256

    db7ebed9bebb7b6c2518444fdd81d167cf296e8e9676455e09586b08c04f9c2f

  • SHA512

    e79dbfee55623db3a3bb605f21214540e281c696776aff66caafddd0e038096fc05c6ec8de8f0e0ef5b6e5b298c7483bb8d54ad063dafac4510e1d935b96c53c

  • SSDEEP

    3072:rRQXpkIWLmFOag5k4RRl5EJYugG/Z+7bATjwdOCDQo0KEkWxN0f:1EILmF34L+ljwQCEo0LkWxs

Malware Config

Targets

    • Target

      db7ebed9bebb7b6c2518444fdd81d167cf296e8e9676455e09586b08c04f9c2f

    • Size

      214KB

    • MD5

      97fe1accb9d7fe5e6e434d116934b173

    • SHA1

      2a63de161c4efc33619e64072006377b63b2fa34

    • SHA256

      db7ebed9bebb7b6c2518444fdd81d167cf296e8e9676455e09586b08c04f9c2f

    • SHA512

      e79dbfee55623db3a3bb605f21214540e281c696776aff66caafddd0e038096fc05c6ec8de8f0e0ef5b6e5b298c7483bb8d54ad063dafac4510e1d935b96c53c

    • SSDEEP

      3072:rRQXpkIWLmFOag5k4RRl5EJYugG/Z+7bATjwdOCDQo0KEkWxN0f:1EILmF34L+ljwQCEo0LkWxs

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Executes dropped EXE

    • Deletes itself

MITRE ATT&CK Enterprise v6

Tasks