Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    016250df0045944cf95f292053494d3daa6fbad6636764d9cf9e81238579e97b

  • Size

    317KB

  • Sample

    221222-pqlqkshf3t

  • MD5

    9dbbf5356ea533567bc69841ee512396

  • SHA1

    1bf1ae13a8e92f4b65f9efee5c477fc4e0064429

  • SHA256

    016250df0045944cf95f292053494d3daa6fbad6636764d9cf9e81238579e97b

  • SHA512

    48ed3ade97dbf1defbbc4e5501762286a62f1ad8f10aa03139810a129d8c45021ed2f28d7fb2bd539faee325fb3b9d946b25a4ac5bb64acafed0945ce890e7f6

  • SSDEEP

    6144:/i31LKbV5bIRKuXt80xRvcRR3JS3rT6fFIJfsAtrwE+:Kl+bHbIRKuX77vk3Jy6tg0yI

Malware Config

Targets

    • Target

      016250df0045944cf95f292053494d3daa6fbad6636764d9cf9e81238579e97b

    • Size

      317KB

    • MD5

      9dbbf5356ea533567bc69841ee512396

    • SHA1

      1bf1ae13a8e92f4b65f9efee5c477fc4e0064429

    • SHA256

      016250df0045944cf95f292053494d3daa6fbad6636764d9cf9e81238579e97b

    • SHA512

      48ed3ade97dbf1defbbc4e5501762286a62f1ad8f10aa03139810a129d8c45021ed2f28d7fb2bd539faee325fb3b9d946b25a4ac5bb64acafed0945ce890e7f6

    • SSDEEP

      6144:/i31LKbV5bIRKuXt80xRvcRR3JS3rT6fFIJfsAtrwE+:Kl+bHbIRKuX77vk3Jy6tg0yI

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks