Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2821ddd0c04061c690b64b1157c2e99ac97637aeb8e97f99991a364a5f3996be

  • Size

    255KB

  • Sample

    221025-1kbtzadhf8

  • MD5

    4f0ed94ec334148466259c6e12b84b02

  • SHA1

    225e401c880b31643a0c2a46613e83f0f7369760

  • SHA256

    2821ddd0c04061c690b64b1157c2e99ac97637aeb8e97f99991a364a5f3996be

  • SHA512

    2306dccff9ebb55bda525827197993d2e0ba5dd03423131a776362c6eda5f85dade035dd04fd7238a1bd562d26b9b662e7e1c3718d0990229c57a9ee6d2a6c0b

  • SSDEEP

    3072:nXV49LagLUSkcGSOTl8rRGXxoriaXY5eXVFcNSoQgKtdXUDEF6:X6xJL4FSOTl8gXxoDXY+GQjBeEF6

Malware Config

Targets

    • Target

      2821ddd0c04061c690b64b1157c2e99ac97637aeb8e97f99991a364a5f3996be

    • Size

      255KB

    • MD5

      4f0ed94ec334148466259c6e12b84b02

    • SHA1

      225e401c880b31643a0c2a46613e83f0f7369760

    • SHA256

      2821ddd0c04061c690b64b1157c2e99ac97637aeb8e97f99991a364a5f3996be

    • SHA512

      2306dccff9ebb55bda525827197993d2e0ba5dd03423131a776362c6eda5f85dade035dd04fd7238a1bd562d26b9b662e7e1c3718d0990229c57a9ee6d2a6c0b

    • SSDEEP

      3072:nXV49LagLUSkcGSOTl8rRGXxoriaXY5eXVFcNSoQgKtdXUDEF6:X6xJL4FSOTl8gXxoDXY+GQjBeEF6

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks