Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    ed64bb4b89eafe7cbeb4d1a4e9d7e3183f7ef35fd614a08129ba243e136135d9

  • Size

    351KB

  • Sample

    221203-wk7t7ace86

  • MD5

    528616b275de5cdcf986ada1b6832098

  • SHA1

    4ec607826d7c7471ecf3a93b7d6ec45b233a10d2

  • SHA256

    ed64bb4b89eafe7cbeb4d1a4e9d7e3183f7ef35fd614a08129ba243e136135d9

  • SHA512

    8b0d6b349945b724bd997ba2ddd72b4c1d8610541bc74931b5caca68493d7503991cb10dd9a516e9958af773ed7eb508434cc1375e15fcfb018955a2adbcf0d9

  • SSDEEP

    6144:8StwMq55QNK+/Z1uCG64nnMW2RqnxphZY:8NdP4bR6MW3xVY

Malware Config

Targets

    • Target

      ed64bb4b89eafe7cbeb4d1a4e9d7e3183f7ef35fd614a08129ba243e136135d9

    • Size

      351KB

    • MD5

      528616b275de5cdcf986ada1b6832098

    • SHA1

      4ec607826d7c7471ecf3a93b7d6ec45b233a10d2

    • SHA256

      ed64bb4b89eafe7cbeb4d1a4e9d7e3183f7ef35fd614a08129ba243e136135d9

    • SHA512

      8b0d6b349945b724bd997ba2ddd72b4c1d8610541bc74931b5caca68493d7503991cb10dd9a516e9958af773ed7eb508434cc1375e15fcfb018955a2adbcf0d9

    • SSDEEP

      6144:8StwMq55QNK+/Z1uCG64nnMW2RqnxphZY:8NdP4bR6MW3xVY

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks