Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a53ef8a03d2c46a1ac561df27098947d38f248f31f4f05bcc98e1c327586e9bf

  • Size

    185KB

  • Sample

    221130-3dnw3aeb76

  • MD5

    9982b0a8d90b18757a8b8483157534ec

  • SHA1

    84b853cd02009f403666cf06a98af656a99561ee

  • SHA256

    a53ef8a03d2c46a1ac561df27098947d38f248f31f4f05bcc98e1c327586e9bf

  • SHA512

    33f6b28b4b5b240b68ee099f00779f6b5121c04974cf946bf3e2c34a0d0ca264bd186268769349167d1eecf5f2f8ba267829a2cafe0971e4ef4451f541f80e78

  • SSDEEP

    3072:1V6MZT1A0rQhkMn5zJrQeTkvpKgBeenIdKRw+6ODNG:/6MlrQhMeT6BBad+Mu

Malware Config

Targets

    • Target

      a53ef8a03d2c46a1ac561df27098947d38f248f31f4f05bcc98e1c327586e9bf

    • Size

      185KB

    • MD5

      9982b0a8d90b18757a8b8483157534ec

    • SHA1

      84b853cd02009f403666cf06a98af656a99561ee

    • SHA256

      a53ef8a03d2c46a1ac561df27098947d38f248f31f4f05bcc98e1c327586e9bf

    • SHA512

      33f6b28b4b5b240b68ee099f00779f6b5121c04974cf946bf3e2c34a0d0ca264bd186268769349167d1eecf5f2f8ba267829a2cafe0971e4ef4451f541f80e78

    • SSDEEP

      3072:1V6MZT1A0rQhkMn5zJrQeTkvpKgBeenIdKRw+6ODNG:/6MlrQhMeT6BBad+Mu

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks