Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    7fb0c851b63a456e9eed918bf8f947c47b6e877e3e1c4a152d690313e3182d56

  • Size

    213KB

  • Sample

    221218-zlscnsdg26

  • MD5

    05ab6b167e3ebd16b557f5d8a87a8804

  • SHA1

    9469b33c4409f536a049b66356f50a494b59c88c

  • SHA256

    7fb0c851b63a456e9eed918bf8f947c47b6e877e3e1c4a152d690313e3182d56

  • SHA512

    c32de8bbec7a0fa4a1c21d60628940dad60004e2af89da0f5b6ea0eaf9a75ac934ee333929f336e17821afbaf7366657145d8211e1724bb83a6868f9fdc9c360

  • SSDEEP

    3072:q6Ie5YLkxrkuKRgkoD1EDc170ulTUyx4nMMuNRAtOba+kbfZN5RjcbImdzmuX:RIeGLkBkzDWo6hyMMu0xzZ3RjcbXF

Malware Config

Targets

    • Target

      7fb0c851b63a456e9eed918bf8f947c47b6e877e3e1c4a152d690313e3182d56

    • Size

      213KB

    • MD5

      05ab6b167e3ebd16b557f5d8a87a8804

    • SHA1

      9469b33c4409f536a049b66356f50a494b59c88c

    • SHA256

      7fb0c851b63a456e9eed918bf8f947c47b6e877e3e1c4a152d690313e3182d56

    • SHA512

      c32de8bbec7a0fa4a1c21d60628940dad60004e2af89da0f5b6ea0eaf9a75ac934ee333929f336e17821afbaf7366657145d8211e1724bb83a6868f9fdc9c360

    • SSDEEP

      3072:q6Ie5YLkxrkuKRgkoD1EDc170ulTUyx4nMMuNRAtOba+kbfZN5RjcbImdzmuX:RIeGLkBkzDWo6hyMMu0xzZ3RjcbXF

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Executes dropped EXE

    • Deletes itself

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks