Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a9a9844f37ba6c20d2fba0f1b4fd5c7e1acd06f75b10d8a88ca72567430b1630

  • Size

    115KB

  • Sample

    221127-zs1mmada51

  • MD5

    deec264f6b674ef4a0421b38ab19cbcc

  • SHA1

    6cb52427e0a30856974c5391fb31f9354bd68703

  • SHA256

    2cee111825dbc6800e870fb12233364977551634ce0aee82d1386a53888b9ca9

  • SHA512

    cfc184dc1bc5340fa1d61bcd30dcdceb4c6d491074617c751723b41a85c25cf3c396cf61ba5218b155845c7a6a066d2a398c61b54dbe7941169cf58630d1284b

  • SSDEEP

    3072:yZRoER9UcCCgzBRoenWozNLkBOpeSkpKbosa5KjnSIYx:yZ+EIcnWxnhzNLkmeRpKbvsx

Malware Config

Targets

    • Target

      a9a9844f37ba6c20d2fba0f1b4fd5c7e1acd06f75b10d8a88ca72567430b1630

    • Size

      167KB

    • MD5

      f1d96c5821eb465ded1b71741495160b

    • SHA1

      2fd76d480926bbf64e5d735eecece6e8cb321b8d

    • SHA256

      a9a9844f37ba6c20d2fba0f1b4fd5c7e1acd06f75b10d8a88ca72567430b1630

    • SHA512

      b8881c880ab85392937265123285ba72111f9269b8b20a54546d84a20f00c710ef6e488b577dde46e4e4dfa2348a469610c999fb500b5f07fbce6f9d37fe5899

    • SSDEEP

      3072:uyq1JTIDugFXJS5rCQGXTqmGxQHAHmBVUdaJnXTSnj2:mtwRFXTqVeAsVUEJG2

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v6

Tasks