Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    699e0614bfa8dc33b154239a65d8190d37091fc17fb7a5200b6d8efa710ad474

  • Size

    285KB

  • Sample

    221105-h574ssgfel

  • MD5

    48a99d3ccb4686968a303dd309e26d07

  • SHA1

    62842709867cc98b4da46d3447a036c9e00d545c

  • SHA256

    699e0614bfa8dc33b154239a65d8190d37091fc17fb7a5200b6d8efa710ad474

  • SHA512

    2ac96641f0b28fcd79033c98f6bcd84d26570d960a09cf7413582a24080a475a8b2c00544c39a878a6841c714a376920a4a7a8a08902081d3e6e5e161a7acc29

  • SSDEEP

    3072:mJNqNQXQgqp56wxI8ckg+ePl8ZTP23wuIROde7nsR6IRk:SqYqmgIPkg+gyiwfOac6IRk

Malware Config

Targets

    • Target

      699e0614bfa8dc33b154239a65d8190d37091fc17fb7a5200b6d8efa710ad474

    • Size

      285KB

    • MD5

      48a99d3ccb4686968a303dd309e26d07

    • SHA1

      62842709867cc98b4da46d3447a036c9e00d545c

    • SHA256

      699e0614bfa8dc33b154239a65d8190d37091fc17fb7a5200b6d8efa710ad474

    • SHA512

      2ac96641f0b28fcd79033c98f6bcd84d26570d960a09cf7413582a24080a475a8b2c00544c39a878a6841c714a376920a4a7a8a08902081d3e6e5e161a7acc29

    • SSDEEP

      3072:mJNqNQXQgqp56wxI8ckg+ePl8ZTP23wuIROde7nsR6IRk:SqYqmgIPkg+gyiwfOac6IRk

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Deletes itself

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks