Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    faf76da64be876db40c97b13f144fe93b616a3d503cc15d5e8472468b27984a7

  • Size

    286KB

  • Sample

    221106-y7v51schbk

  • MD5

    33d20718bb9d25f101c0a8302ad37c3f

  • SHA1

    f0dd9cce7dbf081aa61a1e72c97d9a4b0690d2f2

  • SHA256

    faf76da64be876db40c97b13f144fe93b616a3d503cc15d5e8472468b27984a7

  • SHA512

    e998539178c0513af23410b6d0771f6ffbe4b29ddd9986b13965dcc3907f7dff67f55dcfd2ea60917df152c62cad7490e7d5220fd5b22f42cf6075dc693cd629

  • SSDEEP

    3072:jDXpn+tpO6h57KDTA+RVhgvQpPXrY+AAnj:PpnG/yfCQe+z

Malware Config

Targets

    • Target

      faf76da64be876db40c97b13f144fe93b616a3d503cc15d5e8472468b27984a7

    • Size

      286KB

    • MD5

      33d20718bb9d25f101c0a8302ad37c3f

    • SHA1

      f0dd9cce7dbf081aa61a1e72c97d9a4b0690d2f2

    • SHA256

      faf76da64be876db40c97b13f144fe93b616a3d503cc15d5e8472468b27984a7

    • SHA512

      e998539178c0513af23410b6d0771f6ffbe4b29ddd9986b13965dcc3907f7dff67f55dcfd2ea60917df152c62cad7490e7d5220fd5b22f42cf6075dc693cd629

    • SSDEEP

      3072:jDXpn+tpO6h57KDTA+RVhgvQpPXrY+AAnj:PpnG/yfCQe+z

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks