Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    23fc1e99f37a4868d0c12c315404e7ac2217cf9a57e6a8f1c9bc09d8b233c4e9

  • Size

    213KB

  • Sample

    221217-hchy7sbb3s

  • MD5

    a9cd24aa8ef53afced26dc8d5f4d405d

  • SHA1

    dfb0aec6c60a033b79d4b635f6e83d0297a0c692

  • SHA256

    23fc1e99f37a4868d0c12c315404e7ac2217cf9a57e6a8f1c9bc09d8b233c4e9

  • SHA512

    fc4c8ce914cf0fa8bc277ff39d7947e3e769dbb465d5e10ad871197de5f271683b48dda3b6233c852d99f4a1c37f157ef6c6b402f3ae8f7c14182f51a1f3b4a8

  • SSDEEP

    3072:GLqF9eLXkWNcaTRKeX7wU2CPVxpY7SkRA4LszUimFn2VT40zwUzQRKF+:yrLXkWe2d2AdYuH4gzUv+T40M2b

Malware Config

Targets

    • Target

      23fc1e99f37a4868d0c12c315404e7ac2217cf9a57e6a8f1c9bc09d8b233c4e9

    • Size

      213KB

    • MD5

      a9cd24aa8ef53afced26dc8d5f4d405d

    • SHA1

      dfb0aec6c60a033b79d4b635f6e83d0297a0c692

    • SHA256

      23fc1e99f37a4868d0c12c315404e7ac2217cf9a57e6a8f1c9bc09d8b233c4e9

    • SHA512

      fc4c8ce914cf0fa8bc277ff39d7947e3e769dbb465d5e10ad871197de5f271683b48dda3b6233c852d99f4a1c37f157ef6c6b402f3ae8f7c14182f51a1f3b4a8

    • SSDEEP

      3072:GLqF9eLXkWNcaTRKeX7wU2CPVxpY7SkRA4LszUimFn2VT40zwUzQRKF+:yrLXkWe2d2AdYuH4gzUv+T40M2b

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks