Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    1112591bb55a5d69ea5a8658e47b2097dbfeb87bc92775fd14fdb4771be57b7b

  • Size

    259KB

  • Sample

    221027-maeafsbhar

  • MD5

    e94318b2a961bc101730916a5249d779

  • SHA1

    b3f6b97478c7eb9ce097957a9adb4a69f28a4418

  • SHA256

    1112591bb55a5d69ea5a8658e47b2097dbfeb87bc92775fd14fdb4771be57b7b

  • SHA512

    30b1cad98972adeb845455ba9f7ac680db5875d8bc7596645aed69abcd950c92ba8515bf0d4ee4b20fffa3da2160bca3bbf54489b4f9ee7b678160697dbb5dfa

  • SSDEEP

    3072:+XG+R+APqkkg0EaxybS5X/EBbtSZMFqxjJz3eUGKBY80Kc:GvR+Eq+jaxyOgMMFcJz3eUTBY80

Malware Config

Targets

    • Target

      1112591bb55a5d69ea5a8658e47b2097dbfeb87bc92775fd14fdb4771be57b7b

    • Size

      259KB

    • MD5

      e94318b2a961bc101730916a5249d779

    • SHA1

      b3f6b97478c7eb9ce097957a9adb4a69f28a4418

    • SHA256

      1112591bb55a5d69ea5a8658e47b2097dbfeb87bc92775fd14fdb4771be57b7b

    • SHA512

      30b1cad98972adeb845455ba9f7ac680db5875d8bc7596645aed69abcd950c92ba8515bf0d4ee4b20fffa3da2160bca3bbf54489b4f9ee7b678160697dbb5dfa

    • SSDEEP

      3072:+XG+R+APqkkg0EaxybS5X/EBbtSZMFqxjJz3eUGKBY80Kc:GvR+Eq+jaxyOgMMFcJz3eUTBY80

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks