Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    6887bb2d463e4fe7d77ebce12a36905e00144a5a43af5da815461d2a5e30432a

  • Size

    210KB

  • Sample

    221103-t53pvscec2

  • MD5

    1862a8d6b4d45ccebb728f889eb08b30

  • SHA1

    72a6a40ab3ca67315da42a7dd7e78a377ac4b1f6

  • SHA256

    6887bb2d463e4fe7d77ebce12a36905e00144a5a43af5da815461d2a5e30432a

  • SHA512

    c678dcf2a6a607b0f0661d319cde298af383a76cc4125688971270914dd06748d9327929dfb5f08e38c0d2802afa903311e3979eaae74c03f5569bf9608bc24d

  • SSDEEP

    3072:bVJnyPx5hsfuqJyLjodwE6SHj5cdsJbD3aU00LOXS2OYUOQLx:bVBSHhsfuqgLkWE0uJPKUJ2LU7

Malware Config

Targets

    • Target

      6887bb2d463e4fe7d77ebce12a36905e00144a5a43af5da815461d2a5e30432a

    • Size

      210KB

    • MD5

      1862a8d6b4d45ccebb728f889eb08b30

    • SHA1

      72a6a40ab3ca67315da42a7dd7e78a377ac4b1f6

    • SHA256

      6887bb2d463e4fe7d77ebce12a36905e00144a5a43af5da815461d2a5e30432a

    • SHA512

      c678dcf2a6a607b0f0661d319cde298af383a76cc4125688971270914dd06748d9327929dfb5f08e38c0d2802afa903311e3979eaae74c03f5569bf9608bc24d

    • SSDEEP

      3072:bVJnyPx5hsfuqJyLjodwE6SHj5cdsJbD3aU00LOXS2OYUOQLx:bVBSHhsfuqgLkWE0uJPKUJ2LU7

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks