Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    496100f2b83949de15ba1aefdc98817cbd33663ba38d52699e2bd5656366c941

  • Size

    195KB

  • Sample

    221020-e7qezsebhn

  • MD5

    a2d90ba67f92b8a8de56c4cc6349a0e1

  • SHA1

    fd2657f2e82e3f8ec00256ca83ff0c42050d632f

  • SHA256

    496100f2b83949de15ba1aefdc98817cbd33663ba38d52699e2bd5656366c941

  • SHA512

    6d86a8b2702b73297324018a8db526216dc134f91f2748b871fd205ef3049660b1d4753fddbc3e93e8b676a31599c0c33d041c76c4e5782ff28b6db1dc0fcc34

  • SSDEEP

    3072:mXD4oSLLobPTg5drH4mU51jPnBlDTVGfVT9Jj0KtICacVU:O8oSLL8rus5tBlDUTJj0qICac

Malware Config

Targets

    • Target

      496100f2b83949de15ba1aefdc98817cbd33663ba38d52699e2bd5656366c941

    • Size

      195KB

    • MD5

      a2d90ba67f92b8a8de56c4cc6349a0e1

    • SHA1

      fd2657f2e82e3f8ec00256ca83ff0c42050d632f

    • SHA256

      496100f2b83949de15ba1aefdc98817cbd33663ba38d52699e2bd5656366c941

    • SHA512

      6d86a8b2702b73297324018a8db526216dc134f91f2748b871fd205ef3049660b1d4753fddbc3e93e8b676a31599c0c33d041c76c4e5782ff28b6db1dc0fcc34

    • SSDEEP

      3072:mXD4oSLLobPTg5drH4mU51jPnBlDTVGfVT9Jj0KtICacVU:O8oSLL8rus5tBlDUTJj0qICac

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Deletes itself

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks