Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    66a0d0f33e178ec233bc7661f36d4ab9e74cb56449fc2f459156909bf7bb7a52

  • Size

    238KB

  • Sample

    230101-wapkvsfe2v

  • MD5

    c40fa573a4c8d8be4789ff752c2fa86a

  • SHA1

    02578b4dfb0cfeadb2db77f0c2805a4155b39b3f

  • SHA256

    66a0d0f33e178ec233bc7661f36d4ab9e74cb56449fc2f459156909bf7bb7a52

  • SHA512

    bb00aca6d0049debd61ab14e331f26e963ac9a5e7964413b9e0a05a841ef70af64636cf9228707dc21b225c582cb4849effee9c33033206be5077713c16cec71

  • SSDEEP

    3072:zXOit41LmHYBJa5GHtbK0kp1SKuNda1L8Zx4kb7WkETM2nvQGW7iSWt:rPiL1JnbJKodAbkATV4b7i

Malware Config

Targets

    • Target

      66a0d0f33e178ec233bc7661f36d4ab9e74cb56449fc2f459156909bf7bb7a52

    • Size

      238KB

    • MD5

      c40fa573a4c8d8be4789ff752c2fa86a

    • SHA1

      02578b4dfb0cfeadb2db77f0c2805a4155b39b3f

    • SHA256

      66a0d0f33e178ec233bc7661f36d4ab9e74cb56449fc2f459156909bf7bb7a52

    • SHA512

      bb00aca6d0049debd61ab14e331f26e963ac9a5e7964413b9e0a05a841ef70af64636cf9228707dc21b225c582cb4849effee9c33033206be5077713c16cec71

    • SSDEEP

      3072:zXOit41LmHYBJa5GHtbK0kp1SKuNda1L8Zx4kb7WkETM2nvQGW7iSWt:rPiL1JnbJKodAbkATV4b7i

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Deletes itself

MITRE ATT&CK Enterprise v6

Tasks