Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    621525bc025d75bb87e2c39a1ca11be3f1193a46c3406bf915f1e6c8eb164ef6

  • Size

    214KB

  • Sample

    221218-c1jyhsad75

  • MD5

    6795b0c7186f31375220688726a84f81

  • SHA1

    33a8b2b5064a321786b1d231396c0f0b13ac3e5b

  • SHA256

    621525bc025d75bb87e2c39a1ca11be3f1193a46c3406bf915f1e6c8eb164ef6

  • SHA512

    243163b9bd8a06d944e79f73b184afcd09ff7e3ff2ca67d8304ed3ef08f9007f98b4d6cb01cd8a88e7b40b0f182242246b9173323f952d499fbc1629d7e8fd08

  • SSDEEP

    3072:2+/Ww4uLHNjZwR0AUdtybHcPhJhp09DS6SBeFy8/g3xozEK7H6G3ERWR3LV:H/W5uLH9zP3hJYZcMg3CzEYU0VB

Malware Config

Targets

    • Target

      621525bc025d75bb87e2c39a1ca11be3f1193a46c3406bf915f1e6c8eb164ef6

    • Size

      214KB

    • MD5

      6795b0c7186f31375220688726a84f81

    • SHA1

      33a8b2b5064a321786b1d231396c0f0b13ac3e5b

    • SHA256

      621525bc025d75bb87e2c39a1ca11be3f1193a46c3406bf915f1e6c8eb164ef6

    • SHA512

      243163b9bd8a06d944e79f73b184afcd09ff7e3ff2ca67d8304ed3ef08f9007f98b4d6cb01cd8a88e7b40b0f182242246b9173323f952d499fbc1629d7e8fd08

    • SSDEEP

      3072:2+/Ww4uLHNjZwR0AUdtybHcPhJhp09DS6SBeFy8/g3xozEK7H6G3ERWR3LV:H/W5uLH9zP3hJYZcMg3CzEYU0VB

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks