Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    84dadfc79b48dd5b0248690398d5cc6bc22fba5334d127d2b0ee7da2174bc449

  • Size

    217KB

  • Sample

    221027-etzrhaaeg2

  • MD5

    b5f9b5c3b61cc58565dd8824c6b7c867

  • SHA1

    b90cc1df4aae6326a8ade83888f2dfb696fe5e83

  • SHA256

    84dadfc79b48dd5b0248690398d5cc6bc22fba5334d127d2b0ee7da2174bc449

  • SHA512

    29e0607101be561f53c7df10755c407aa1d824e1c0948db63f8915b425c7d90705d9b71c649b3096cbc82d262485e88d8cddc707a9ff9ab5193e7eefa8d65099

  • SSDEEP

    6144:Z1S32aOLzJe4p/8mlnI8I2yF8WkDABSdBt:Z1Sm/nk4OmlI8IRMVz

Malware Config

Targets

    • Target

      84dadfc79b48dd5b0248690398d5cc6bc22fba5334d127d2b0ee7da2174bc449

    • Size

      217KB

    • MD5

      b5f9b5c3b61cc58565dd8824c6b7c867

    • SHA1

      b90cc1df4aae6326a8ade83888f2dfb696fe5e83

    • SHA256

      84dadfc79b48dd5b0248690398d5cc6bc22fba5334d127d2b0ee7da2174bc449

    • SHA512

      29e0607101be561f53c7df10755c407aa1d824e1c0948db63f8915b425c7d90705d9b71c649b3096cbc82d262485e88d8cddc707a9ff9ab5193e7eefa8d65099

    • SSDEEP

      6144:Z1S32aOLzJe4p/8mlnI8I2yF8WkDABSdBt:Z1Sm/nk4OmlI8IRMVz

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Deletes itself

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks