Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    c32101929b37f32306afe52ec84a8525a8471cd19d17a41893793cc8c5eae322

  • Size

    200KB

  • Sample

    221205-k7m8hsac3w

  • MD5

    1016acbfc068a1619623f08afb30f909

  • SHA1

    bea98b484d56e6fd6c5cfedde1f5f665196d6db4

  • SHA256

    c32101929b37f32306afe52ec84a8525a8471cd19d17a41893793cc8c5eae322

  • SHA512

    64ad6eb64aa58faf4430f7936b1003689af37fce3bb97c1259b72008ce723e563d1803a322698268e290df38e4e8a9ccc11d987e16a6f708e9fdb6f47e3cff6b

  • SSDEEP

    3072:P+CgjV5b5ukI5gZo8PiDpO2q+4Jy0/Nm/BMDLy1hTDw02rwIPVbJgh9s:poZumUDpOs4Jy0/NAqDLys02s+gh9

Malware Config

Targets

    • Target

      c32101929b37f32306afe52ec84a8525a8471cd19d17a41893793cc8c5eae322

    • Size

      200KB

    • MD5

      1016acbfc068a1619623f08afb30f909

    • SHA1

      bea98b484d56e6fd6c5cfedde1f5f665196d6db4

    • SHA256

      c32101929b37f32306afe52ec84a8525a8471cd19d17a41893793cc8c5eae322

    • SHA512

      64ad6eb64aa58faf4430f7936b1003689af37fce3bb97c1259b72008ce723e563d1803a322698268e290df38e4e8a9ccc11d987e16a6f708e9fdb6f47e3cff6b

    • SSDEEP

      3072:P+CgjV5b5ukI5gZo8PiDpO2q+4Jy0/Nm/BMDLy1hTDw02rwIPVbJgh9s:poZumUDpOs4Jy0/NAqDLys02s+gh9

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks