Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    25efa3640c9ec3c4429740429b6bcdfc17a299bfa6f34880c1813ad289651069

  • Size

    320KB

  • Sample

    221206-kv2kdabh95

  • MD5

    bd9972da3a086cef4434f306b52dc371

  • SHA1

    884ffea6090546877f9f1d3e209a781c3b2c8a19

  • SHA256

    25efa3640c9ec3c4429740429b6bcdfc17a299bfa6f34880c1813ad289651069

  • SHA512

    e38055dbe65077dd0f28548a146e2e42e7aa0a085a45c4ff1acac9f20340bfe21d97a054393928c44d5aac0526e5733ef1a3728f2a9a27ac411e516f13f0e9bd

  • SSDEEP

    6144:VNbLBjy4JXLLZfNYT400y63Mjv9ZiM4VqFF:VNJjy8vZfNYb0y63ivnjSqFF

Malware Config

Targets

    • Target

      25efa3640c9ec3c4429740429b6bcdfc17a299bfa6f34880c1813ad289651069

    • Size

      320KB

    • MD5

      bd9972da3a086cef4434f306b52dc371

    • SHA1

      884ffea6090546877f9f1d3e209a781c3b2c8a19

    • SHA256

      25efa3640c9ec3c4429740429b6bcdfc17a299bfa6f34880c1813ad289651069

    • SHA512

      e38055dbe65077dd0f28548a146e2e42e7aa0a085a45c4ff1acac9f20340bfe21d97a054393928c44d5aac0526e5733ef1a3728f2a9a27ac411e516f13f0e9bd

    • SSDEEP

      6144:VNbLBjy4JXLLZfNYT400y63Mjv9ZiM4VqFF:VNJjy8vZfNYb0y63ivnjSqFF

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks