Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    606b5179a40b830d209c57548118b89bda1af71441c9a446a568beaa6d83a38c

  • Size

    137KB

  • Sample

    221125-lfrx3abe8v

  • MD5

    11c15bcc555195f8e29b35cdb9f4a27b

  • SHA1

    aeee251a75338404c2f181ea34fa7a81b9dc1730

  • SHA256

    606b5179a40b830d209c57548118b89bda1af71441c9a446a568beaa6d83a38c

  • SHA512

    0545edd1a0832746c447d893fa367992051921acec18de075696566244644a3747317dfca0cdc41036166ab50e74b9f3de596d8a7c2be00943fbf1dd78c18a93

  • SSDEEP

    3072:D8dWLdcvNZVaHeaqUPAgQwgYGxx2gckR:D8d++ZVa2U0MGKgc+

Malware Config

Targets

    • Target

      606b5179a40b830d209c57548118b89bda1af71441c9a446a568beaa6d83a38c

    • Size

      137KB

    • MD5

      11c15bcc555195f8e29b35cdb9f4a27b

    • SHA1

      aeee251a75338404c2f181ea34fa7a81b9dc1730

    • SHA256

      606b5179a40b830d209c57548118b89bda1af71441c9a446a568beaa6d83a38c

    • SHA512

      0545edd1a0832746c447d893fa367992051921acec18de075696566244644a3747317dfca0cdc41036166ab50e74b9f3de596d8a7c2be00943fbf1dd78c18a93

    • SSDEEP

      3072:D8dWLdcvNZVaHeaqUPAgQwgYGxx2gckR:D8d++ZVa2U0MGKgc+

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v6

Tasks