Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    file.exe

  • Size

    287KB

  • Sample

    221231-frzjdshb98

  • MD5

    9350d0a2869e9dce180bcc00f6cec602

  • SHA1

    36997490e1ebb939b04976aa4f1620d3def4c637

  • SHA256

    e2d1e8d99d703d901d0603317b4eed6759eff0dcfa72933d4ea58d4dc242875b

  • SHA512

    9a87dfd67cd073fd07674c38c431a32d684e19c033339a0cefc45dfbb59e2eff3621d44834e282a1e329f55ec4c40660e3423d72603a974bb19a4eff9363a3d7

  • SSDEEP

    6144:LzdXrL7xEuAylSevFcUeYTV3h+8x5Cyb8UIkEq:Lztr/xEuAylSoTTfx5CyI9q

Malware Config

Targets

    • Target

      file.exe

    • Size

      287KB

    • MD5

      9350d0a2869e9dce180bcc00f6cec602

    • SHA1

      36997490e1ebb939b04976aa4f1620d3def4c637

    • SHA256

      e2d1e8d99d703d901d0603317b4eed6759eff0dcfa72933d4ea58d4dc242875b

    • SHA512

      9a87dfd67cd073fd07674c38c431a32d684e19c033339a0cefc45dfbb59e2eff3621d44834e282a1e329f55ec4c40660e3423d72603a974bb19a4eff9363a3d7

    • SSDEEP

      6144:LzdXrL7xEuAylSevFcUeYTV3h+8x5Cyb8UIkEq:Lztr/xEuAylSoTTfx5CyI9q

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks