Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a7ad095285082e5d842734b4ed7051ba1db97f50192341facadf976cda7933f6

  • Size

    249KB

  • Sample

    221230-n5k7xsag5y

  • MD5

    ee432a705afd8a1885aae1e8cbf48bbd

  • SHA1

    5b41eef4ee6b9fd04feb2819c356b6bb140af9ae

  • SHA256

    a7ad095285082e5d842734b4ed7051ba1db97f50192341facadf976cda7933f6

  • SHA512

    209d99e777fb2a4ca3d297e93d7015d41eb00d352d5b14d8b1fa1dcf16bb1812c99dc830028c12706a1ee016992a6f01c92ed6f0978f597469b103b06e805375

  • SSDEEP

    3072:cj2RYTBHLsd+0RZJVGB7egAnmFcvxhpdJm6y36LU8y5/LU8y5kDB6xuqqb53y1tz:LY1HLsIAtnA6pdjy6o5o+cx3E5

Malware Config

Targets

    • Target

      a7ad095285082e5d842734b4ed7051ba1db97f50192341facadf976cda7933f6

    • Size

      249KB

    • MD5

      ee432a705afd8a1885aae1e8cbf48bbd

    • SHA1

      5b41eef4ee6b9fd04feb2819c356b6bb140af9ae

    • SHA256

      a7ad095285082e5d842734b4ed7051ba1db97f50192341facadf976cda7933f6

    • SHA512

      209d99e777fb2a4ca3d297e93d7015d41eb00d352d5b14d8b1fa1dcf16bb1812c99dc830028c12706a1ee016992a6f01c92ed6f0978f597469b103b06e805375

    • SSDEEP

      3072:cj2RYTBHLsd+0RZJVGB7egAnmFcvxhpdJm6y36LU8y5/LU8y5kDB6xuqqb53y1tz:LY1HLsIAtnA6pdjy6o5o+cx3E5

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks