Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    92d41f67ada5d715370f2972adcb0418919760199a7c6be6a44c0bd8fa350c51

  • Size

    216KB

  • Sample

    221017-3ys2hsdhgj

  • MD5

    1dbadf056701ed2512fa120aa3e93f17

  • SHA1

    6062ecfbe34dd89916ea21729202aab8589ba07f

  • SHA256

    92d41f67ada5d715370f2972adcb0418919760199a7c6be6a44c0bd8fa350c51

  • SHA512

    681f00cc8f5c719c421b6af27f4bdd10bf3c93dd47385f16a8db98c1bc0d2cd3d3bcdc4a199bf55d8a200c8693b79728042f0d603da9ec6d217bec42c5d89ced

  • SSDEEP

    3072:0WEShV4JjOEjyZmFoubLkEUpfeBFnkFL6feMhY4ZRJqgF6gct4OLOA:0HSkOZmnLklpWBU2dYCRb6gct4OLO

Malware Config

Targets

    • Target

      92d41f67ada5d715370f2972adcb0418919760199a7c6be6a44c0bd8fa350c51

    • Size

      216KB

    • MD5

      1dbadf056701ed2512fa120aa3e93f17

    • SHA1

      6062ecfbe34dd89916ea21729202aab8589ba07f

    • SHA256

      92d41f67ada5d715370f2972adcb0418919760199a7c6be6a44c0bd8fa350c51

    • SHA512

      681f00cc8f5c719c421b6af27f4bdd10bf3c93dd47385f16a8db98c1bc0d2cd3d3bcdc4a199bf55d8a200c8693b79728042f0d603da9ec6d217bec42c5d89ced

    • SSDEEP

      3072:0WEShV4JjOEjyZmFoubLkEUpfeBFnkFL6feMhY4ZRJqgF6gct4OLOA:0HSkOZmnLklpWBU2dYCRb6gct4OLO

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Deletes itself

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks