Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    462318633e7d48f3462e76f08a6f5fa5d46552ec82f9810c430ccb1646209a98

  • Size

    274KB

  • Sample

    221205-s6ya4adc93

  • MD5

    f4d933eba93d06e885e32ae227fe113b

  • SHA1

    d4e6d857a348eabe4c3a0cf508248fe7f50c737f

  • SHA256

    462318633e7d48f3462e76f08a6f5fa5d46552ec82f9810c430ccb1646209a98

  • SHA512

    9c41ad7a7716a4077b4d10b0ed23298b87a15f086404b3516060a3c4ef18ac4687dff4da3d9176f8708887632accc5d9dfd675bdf9e1eb53ed27462ad3c67869

  • SSDEEP

    3072:z/xXVsttpYVWSRv/C/WW5KaMqRqqqWYCYZhaPV6nqmhTDw02rwkGpv02ZeXGMh0r:DVp/CiNzWIhaQql02sk8vve2U

Malware Config

Targets

    • Target

      462318633e7d48f3462e76f08a6f5fa5d46552ec82f9810c430ccb1646209a98

    • Size

      274KB

    • MD5

      f4d933eba93d06e885e32ae227fe113b

    • SHA1

      d4e6d857a348eabe4c3a0cf508248fe7f50c737f

    • SHA256

      462318633e7d48f3462e76f08a6f5fa5d46552ec82f9810c430ccb1646209a98

    • SHA512

      9c41ad7a7716a4077b4d10b0ed23298b87a15f086404b3516060a3c4ef18ac4687dff4da3d9176f8708887632accc5d9dfd675bdf9e1eb53ed27462ad3c67869

    • SSDEEP

      3072:z/xXVsttpYVWSRv/C/WW5KaMqRqqqWYCYZhaPV6nqmhTDw02rwkGpv02ZeXGMh0r:DVp/CiNzWIhaQql02sk8vve2U

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks