Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    86f8a148a92c384d837156ee27a7a745c322807921a91d70736da6359e2e4ebc

  • Size

    216KB

  • Sample

    221107-pv75daachk

  • MD5

    e53b3c62468c3424da9afd607da9e1c6

  • SHA1

    f1f9819f94f3d326da1fed0bb19ef7a2d14eb81d

  • SHA256

    86f8a148a92c384d837156ee27a7a745c322807921a91d70736da6359e2e4ebc

  • SHA512

    690d7bce1047628b82f5482eb415625942d9b2a3c68dd7b6b22beffb91346bd9123782ce1ab106f77e8047bcff07232983413e72d6534d49d7f3585401fe41fb

  • SSDEEP

    3072:qgD0jm1uPtXLZUW83ZMLRbCS66oSN5Hl0j3KgESnkaiHA8iEMAOGuQo:qgym0vUDKLV63Y0c/gaMAOT

Malware Config

Targets

    • Target

      86f8a148a92c384d837156ee27a7a745c322807921a91d70736da6359e2e4ebc

    • Size

      216KB

    • MD5

      e53b3c62468c3424da9afd607da9e1c6

    • SHA1

      f1f9819f94f3d326da1fed0bb19ef7a2d14eb81d

    • SHA256

      86f8a148a92c384d837156ee27a7a745c322807921a91d70736da6359e2e4ebc

    • SHA512

      690d7bce1047628b82f5482eb415625942d9b2a3c68dd7b6b22beffb91346bd9123782ce1ab106f77e8047bcff07232983413e72d6534d49d7f3585401fe41fb

    • SSDEEP

      3072:qgD0jm1uPtXLZUW83ZMLRbCS66oSN5Hl0j3KgESnkaiHA8iEMAOGuQo:qgym0vUDKLV63Y0c/gaMAOT

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Deletes itself

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks