Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    file.exe

  • Size

    256KB

  • Sample

    221231-wbp8saab34

  • MD5

    8f6be9f2111a5fc93e49f856a862e716

  • SHA1

    1f1787c0433a4a5a761f91fbeb8e2049be9b8a3e

  • SHA256

    bc92a03dfef401f7e6f62c5cbe087e57df471d12c75831f368d88b7972e4339b

  • SHA512

    c23adfba55048d0c2db00adcc80dbf70ea3482bb559da62625150363a0e4c79a9d48c984826ce76955b3c7616ad37f121ce176f188c9968089e912159ba75903

  • SSDEEP

    3072:r2xDZm7uIQLLL8deq+RpqGqg6WAvXsnYmydhidT/TZmqKyBpwGw27hZY:eeALceqoGgm/3m6hQjQRyjj9ZY

Malware Config

Targets

    • Target

      file.exe

    • Size

      256KB

    • MD5

      8f6be9f2111a5fc93e49f856a862e716

    • SHA1

      1f1787c0433a4a5a761f91fbeb8e2049be9b8a3e

    • SHA256

      bc92a03dfef401f7e6f62c5cbe087e57df471d12c75831f368d88b7972e4339b

    • SHA512

      c23adfba55048d0c2db00adcc80dbf70ea3482bb559da62625150363a0e4c79a9d48c984826ce76955b3c7616ad37f121ce176f188c9968089e912159ba75903

    • SSDEEP

      3072:r2xDZm7uIQLLL8deq+RpqGqg6WAvXsnYmydhidT/TZmqKyBpwGw27hZY:eeALceqoGgm/3m6hQjQRyjj9ZY

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks