Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    983564b3ceb6242f4e1b59a99ba3125da6dcf3620fc5e944584bdeef42c7de82

  • Size

    240KB

  • Sample

    221231-2dhvdaag34

  • MD5

    541a1499a93a8624ddb6f76f83fc32b3

  • SHA1

    b63baca17930a15143bb97ac9fed397804994048

  • SHA256

    983564b3ceb6242f4e1b59a99ba3125da6dcf3620fc5e944584bdeef42c7de82

  • SHA512

    ebb945e421e781eb2c8776cf775fd21f14fd02dbb05e3ac90b3aba80b640d834b07d78d57ec107cae9ea573893668b859ca90cb4080105182d2bfb33005fc98d

  • SSDEEP

    3072:wXRpfgLU2TIEV+hzk8m55VD23nEtVr0FOCYnDiZmqIlFWp27hZY:k8LShQ8MDyEtVfCYnDi0zlg0ZY

Malware Config

Targets

    • Target

      983564b3ceb6242f4e1b59a99ba3125da6dcf3620fc5e944584bdeef42c7de82

    • Size

      240KB

    • MD5

      541a1499a93a8624ddb6f76f83fc32b3

    • SHA1

      b63baca17930a15143bb97ac9fed397804994048

    • SHA256

      983564b3ceb6242f4e1b59a99ba3125da6dcf3620fc5e944584bdeef42c7de82

    • SHA512

      ebb945e421e781eb2c8776cf775fd21f14fd02dbb05e3ac90b3aba80b640d834b07d78d57ec107cae9ea573893668b859ca90cb4080105182d2bfb33005fc98d

    • SSDEEP

      3072:wXRpfgLU2TIEV+hzk8m55VD23nEtVr0FOCYnDiZmqIlFWp27hZY:k8LShQ8MDyEtVfCYnDi0zlg0ZY

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks