Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    aa9ad8f31651f0ba745bf089cc71b29b33e40ff086cbead9f8c1ed82507fedb2

  • Size

    295KB

  • Sample

    221231-lpna8scf7x

  • MD5

    c879102fc414340426e6d589b661f601

  • SHA1

    a1e4f20caf16716b6f8161d075e9b2d794fd79cc

  • SHA256

    aa9ad8f31651f0ba745bf089cc71b29b33e40ff086cbead9f8c1ed82507fedb2

  • SHA512

    76c7aff0f890136f4953d929c0a381d7ef6ba70e8f896d49c12620cbf2342888e8ffec8a09255548cd12ef3d91c9a92bdec1207ecf5c5d9089c44b926c91e25e

  • SSDEEP

    3072:xZ6q0BC4L9RncYOoRY+EshzMZCslXiAHsPmOHmq1mq+SU27hZYw8sS:569LncYSMoZCstwGdlyZYw

Malware Config

Targets

    • Target

      aa9ad8f31651f0ba745bf089cc71b29b33e40ff086cbead9f8c1ed82507fedb2

    • Size

      295KB

    • MD5

      c879102fc414340426e6d589b661f601

    • SHA1

      a1e4f20caf16716b6f8161d075e9b2d794fd79cc

    • SHA256

      aa9ad8f31651f0ba745bf089cc71b29b33e40ff086cbead9f8c1ed82507fedb2

    • SHA512

      76c7aff0f890136f4953d929c0a381d7ef6ba70e8f896d49c12620cbf2342888e8ffec8a09255548cd12ef3d91c9a92bdec1207ecf5c5d9089c44b926c91e25e

    • SSDEEP

      3072:xZ6q0BC4L9RncYOoRY+EshzMZCslXiAHsPmOHmq1mq+SU27hZYw8sS:569LncYSMoZCstwGdlyZYw

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks