Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    9d04d8148bc24a697d69faa1dec9481748e77fa83785cab490956ab642bde6bd.exe

  • Size

    214KB

  • Sample

    221219-1jzveabc7y

  • MD5

    0b1e95124acb64f04edf04a14fa8a1a4

  • SHA1

    193ebdafcbed829572fe5a90134f368ec06cc3d2

  • SHA256

    9d04d8148bc24a697d69faa1dec9481748e77fa83785cab490956ab642bde6bd

  • SHA512

    99ab049ad445447ea6ed1bf6d69978c0d352ae610c954d935a5124df82906fd835eb8f49a5998aa1ad613553f35962b1343c70ffbd8c68e0594804a7d76a6b3c

  • SSDEEP

    3072:M74oE38Lz5T72VARrKK4zP7smzjC846Jat7VOH+vNRAtOba+cHuwRFjcbImdzmuX:S4YLz972PK4XfWZIHu0FvRFjcbXF

Malware Config

Targets

    • Target

      9d04d8148bc24a697d69faa1dec9481748e77fa83785cab490956ab642bde6bd.exe

    • Size

      214KB

    • MD5

      0b1e95124acb64f04edf04a14fa8a1a4

    • SHA1

      193ebdafcbed829572fe5a90134f368ec06cc3d2

    • SHA256

      9d04d8148bc24a697d69faa1dec9481748e77fa83785cab490956ab642bde6bd

    • SHA512

      99ab049ad445447ea6ed1bf6d69978c0d352ae610c954d935a5124df82906fd835eb8f49a5998aa1ad613553f35962b1343c70ffbd8c68e0594804a7d76a6b3c

    • SSDEEP

      3072:M74oE38Lz5T72VARrKK4zP7smzjC846Jat7VOH+vNRAtOba+cHuwRFjcbImdzmuX:S4YLz972PK4XfWZIHu0FvRFjcbXF

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks