Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    8ac6cdf5bc860699cadafbd51d599b6a5525528172b19ab7a30c46ddae657c07

  • Size

    255KB

  • Sample

    221025-v9pt8sddbk

  • MD5

    08d9393dcd344de4de3cc1756f6ae080

  • SHA1

    6f9ac1c9ed9eb2d6834c69b365046c42afd0c8de

  • SHA256

    8ac6cdf5bc860699cadafbd51d599b6a5525528172b19ab7a30c46ddae657c07

  • SHA512

    41ec28fbb45bb1f8a4494464f0abf0b886beb375341783a4b55b01968d7f7fe04507e3a7b881c6cbd62cbed038a2a703b932ea86c8c4343cd2c50c6189a6b230

  • SSDEEP

    6144:OyQBLe8rMT7A8VR79NV0L6orwrzN1cn73t:OnK8rMTs8f7AWzXc73t

Malware Config

Targets

    • Target

      8ac6cdf5bc860699cadafbd51d599b6a5525528172b19ab7a30c46ddae657c07

    • Size

      255KB

    • MD5

      08d9393dcd344de4de3cc1756f6ae080

    • SHA1

      6f9ac1c9ed9eb2d6834c69b365046c42afd0c8de

    • SHA256

      8ac6cdf5bc860699cadafbd51d599b6a5525528172b19ab7a30c46ddae657c07

    • SHA512

      41ec28fbb45bb1f8a4494464f0abf0b886beb375341783a4b55b01968d7f7fe04507e3a7b881c6cbd62cbed038a2a703b932ea86c8c4343cd2c50c6189a6b230

    • SSDEEP

      6144:OyQBLe8rMT7A8VR79NV0L6orwrzN1cn73t:OnK8rMTs8f7AWzXc73t

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Deletes itself

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks