Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    b606df43759b25e1300a9042370170e20f3f126aba31673b8d952fc11397c04c

  • Size

    222KB

  • Sample

    221225-bls27sah77

  • MD5

    ee95ff2755305e8eff9f6e1d2e3e5aeb

  • SHA1

    8eeab94b1432530e8d0decb35ab0d6448ca183ee

  • SHA256

    b606df43759b25e1300a9042370170e20f3f126aba31673b8d952fc11397c04c

  • SHA512

    3aa75f5afc1a187f6413d2bcaf8eadfc90970e34bf0d0164af4141aecada238033f8829ea1fca15ef26bd5361837103126333d4fecb221eaf8626500ed5b9c2e

  • SSDEEP

    3072:YDenLl7x5mlAN8XJdMehkP1uzL5auDXUgaRuHf/ln:rLl7qliUJdbhWuxaMAC

Malware Config

Targets

    • Target

      b606df43759b25e1300a9042370170e20f3f126aba31673b8d952fc11397c04c

    • Size

      222KB

    • MD5

      ee95ff2755305e8eff9f6e1d2e3e5aeb

    • SHA1

      8eeab94b1432530e8d0decb35ab0d6448ca183ee

    • SHA256

      b606df43759b25e1300a9042370170e20f3f126aba31673b8d952fc11397c04c

    • SHA512

      3aa75f5afc1a187f6413d2bcaf8eadfc90970e34bf0d0164af4141aecada238033f8829ea1fca15ef26bd5361837103126333d4fecb221eaf8626500ed5b9c2e

    • SSDEEP

      3072:YDenLl7x5mlAN8XJdMehkP1uzL5auDXUgaRuHf/ln:rLl7qliUJdbhWuxaMAC

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks