Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    42662392f30a35f68a739190efbc1df0c13cdd3258bd5f1ba9b01e829b5a2a71

  • Size

    228KB

  • Sample

    221223-jpt3nsbc8s

  • MD5

    6605e6f473dfe74773348d44cb040c75

  • SHA1

    87f8b117a68f300b731a8f8a7c332e2e3c18ca95

  • SHA256

    42662392f30a35f68a739190efbc1df0c13cdd3258bd5f1ba9b01e829b5a2a71

  • SHA512

    4237e21f3c4054ffb4544df2cc87d02dc791f3527bfd313e3e3df3d258a2b38bf60248adc84a73d24f10a2c83ce434502af91b51e468f564dfb8f53a90916f47

  • SSDEEP

    3072:VeELifif5LoRyMlidTbYG4UEH90Qu+oukzFZMRGIWBkOuRGK:wEL0RNyGUEd0pukIGIpjcK

Malware Config

Targets

    • Target

      42662392f30a35f68a739190efbc1df0c13cdd3258bd5f1ba9b01e829b5a2a71

    • Size

      228KB

    • MD5

      6605e6f473dfe74773348d44cb040c75

    • SHA1

      87f8b117a68f300b731a8f8a7c332e2e3c18ca95

    • SHA256

      42662392f30a35f68a739190efbc1df0c13cdd3258bd5f1ba9b01e829b5a2a71

    • SHA512

      4237e21f3c4054ffb4544df2cc87d02dc791f3527bfd313e3e3df3d258a2b38bf60248adc84a73d24f10a2c83ce434502af91b51e468f564dfb8f53a90916f47

    • SSDEEP

      3072:VeELifif5LoRyMlidTbYG4UEH90Qu+oukzFZMRGIWBkOuRGK:wEL0RNyGUEd0pukIGIpjcK

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Deletes itself

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks