Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0529f2a5e42b6bfe0097ab4a48b92077791079c6893f46023f5d68ed9963ad65

  • Size

    316KB

  • Sample

    221122-hhxpjsgd71

  • MD5

    3c96d613259b22193f9135b2cf276c10

  • SHA1

    f3d0b51bcabdf838d3d854e9b12d4a6fb1f6fff0

  • SHA256

    0529f2a5e42b6bfe0097ab4a48b92077791079c6893f46023f5d68ed9963ad65

  • SHA512

    4b669028d6ba6bfee6d53cad702d8088d679dc59ec42ac63fb0ed6f739c5a913febbfd8abaaf46df4c74abcf9242d41b1acb02915ea7a5bb45e36c5fc97df943

  • SSDEEP

    6144:zpN03HC6Jru8wIYt8sVmeTHkcNlaLUsMDmshnkf8+CwbG:43i6JEIYVVmGkcNlaB6zc8wG

Malware Config

Targets

    • Target

      0529f2a5e42b6bfe0097ab4a48b92077791079c6893f46023f5d68ed9963ad65

    • Size

      316KB

    • MD5

      3c96d613259b22193f9135b2cf276c10

    • SHA1

      f3d0b51bcabdf838d3d854e9b12d4a6fb1f6fff0

    • SHA256

      0529f2a5e42b6bfe0097ab4a48b92077791079c6893f46023f5d68ed9963ad65

    • SHA512

      4b669028d6ba6bfee6d53cad702d8088d679dc59ec42ac63fb0ed6f739c5a913febbfd8abaaf46df4c74abcf9242d41b1acb02915ea7a5bb45e36c5fc97df943

    • SSDEEP

      6144:zpN03HC6Jru8wIYt8sVmeTHkcNlaLUsMDmshnkf8+CwbG:43i6JEIYVVmGkcNlaB6zc8wG

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks