Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    66911f05d7a486176010406a1a4ce247f830983b9deb85a8ce8f574a8f3f2267

  • Size

    194KB

  • Sample

    221020-kwlkjseean

  • MD5

    60d26a6d319c4cbd702bb88ecba116e2

  • SHA1

    01dd3e6c8b6dcc1dd6583fcb0a8efa4fdcbe82a3

  • SHA256

    66911f05d7a486176010406a1a4ce247f830983b9deb85a8ce8f574a8f3f2267

  • SHA512

    5b8818d162fcad7dbf659f6af3801e06f1fe4443223f93f2cd860475cdfbc9dc1dc6b58d0229671039001c09ec5c574189d534825fc96d86affe74d221d2c674

  • SSDEEP

    3072:YXXSjlOAqLbRLDA8s05z0/DVhtj/pVww1VVtaC0K/ER6LLCq:0alOAqLh7s5v7O4VVT0kERnq

Malware Config

Targets

    • Target

      66911f05d7a486176010406a1a4ce247f830983b9deb85a8ce8f574a8f3f2267

    • Size

      194KB

    • MD5

      60d26a6d319c4cbd702bb88ecba116e2

    • SHA1

      01dd3e6c8b6dcc1dd6583fcb0a8efa4fdcbe82a3

    • SHA256

      66911f05d7a486176010406a1a4ce247f830983b9deb85a8ce8f574a8f3f2267

    • SHA512

      5b8818d162fcad7dbf659f6af3801e06f1fe4443223f93f2cd860475cdfbc9dc1dc6b58d0229671039001c09ec5c574189d534825fc96d86affe74d221d2c674

    • SSDEEP

      3072:YXXSjlOAqLbRLDA8s05z0/DVhtj/pVww1VVtaC0K/ER6LLCq:0alOAqLh7s5v7O4VVT0kERnq

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks