Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    cb2ee077dae92931c48a7517bcd7f3e8cbbf30125b32eeec0eb9b1478369bbca

  • Size

    216KB

  • Sample

    221026-mg764sfdgp

  • MD5

    25904484d382fb8f47abfb76b6f3a346

  • SHA1

    30e232616e35d6a511a8aeab5efd46a579395b16

  • SHA256

    cb2ee077dae92931c48a7517bcd7f3e8cbbf30125b32eeec0eb9b1478369bbca

  • SHA512

    a31d9ff44e2387d141debe3597b7a3c5963023cbef72a5ba197441b8aad2fbfd7d4a8af8189601fe5d247b60656508f67c8f684657568c54a7d6b702ffa8db8b

  • SSDEEP

    3072:XNChgWID6B4KpLviiE1Q57ZxSQY/erqm250tex:XMh3dLaiE1QxSvQqm2SY

Malware Config

Targets

    • Target

      cb2ee077dae92931c48a7517bcd7f3e8cbbf30125b32eeec0eb9b1478369bbca

    • Size

      216KB

    • MD5

      25904484d382fb8f47abfb76b6f3a346

    • SHA1

      30e232616e35d6a511a8aeab5efd46a579395b16

    • SHA256

      cb2ee077dae92931c48a7517bcd7f3e8cbbf30125b32eeec0eb9b1478369bbca

    • SHA512

      a31d9ff44e2387d141debe3597b7a3c5963023cbef72a5ba197441b8aad2fbfd7d4a8af8189601fe5d247b60656508f67c8f684657568c54a7d6b702ffa8db8b

    • SSDEEP

      3072:XNChgWID6B4KpLviiE1Q57ZxSQY/erqm250tex:XMh3dLaiE1QxSvQqm2SY

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Deletes itself

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks