Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    618edab381abac103d7fb43139a2dd4d8d5241338e460f253f5d2b078d96e809

  • Size

    229KB

  • Sample

    221223-h3qrqsga82

  • MD5

    7a65dbe935be18c2a06624d8c35436d0

  • SHA1

    10fa2e579d4b5ddd457e27d1df559b34ae637d1b

  • SHA256

    618edab381abac103d7fb43139a2dd4d8d5241338e460f253f5d2b078d96e809

  • SHA512

    e9a3a49fe0169aa7eba4a74c0dd5e2027a1fa6dd6b39b94abedb13bfe3e4c0bd3a369279840de32e073d0bdd962d98fe768f6cd80dc6cee05baf7092d37982c9

  • SSDEEP

    3072:5eMLVcf5Q5AfOBhUFBds4GRu+oukz3WBkOuRGK:jLV/AOMza4DukDpjcK

Malware Config

Targets

    • Target

      618edab381abac103d7fb43139a2dd4d8d5241338e460f253f5d2b078d96e809

    • Size

      229KB

    • MD5

      7a65dbe935be18c2a06624d8c35436d0

    • SHA1

      10fa2e579d4b5ddd457e27d1df559b34ae637d1b

    • SHA256

      618edab381abac103d7fb43139a2dd4d8d5241338e460f253f5d2b078d96e809

    • SHA512

      e9a3a49fe0169aa7eba4a74c0dd5e2027a1fa6dd6b39b94abedb13bfe3e4c0bd3a369279840de32e073d0bdd962d98fe768f6cd80dc6cee05baf7092d37982c9

    • SSDEEP

      3072:5eMLVcf5Q5AfOBhUFBds4GRu+oukz3WBkOuRGK:jLV/AOMza4DukDpjcK

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks