Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    79258a91193e598bda2bda0c75f957bc695cdd8c40448ec7b49609d1c27aebdb

  • Size

    195KB

  • Sample

    230102-2lxcqsbe91

  • MD5

    1bef6c2691cfbc12015ced39bec0cf3b

  • SHA1

    5f3e1977e9d33b016730f33dde4a579fcb90df6e

  • SHA256

    79258a91193e598bda2bda0c75f957bc695cdd8c40448ec7b49609d1c27aebdb

  • SHA512

    32dec1d210b636779451156c776fa2c0b525a04e50574438715990eae1884d93b77dfe487f1dc69161d796113526c4f524aa7b7634ff324fef7dbeeb056e3f10

  • SSDEEP

    3072:XX5F2zO9GLgC1XdMxo5qaFfP1lcr7tmDhfg4DmZhLP:H9YLBdM3iP1lcr7tCftG

Malware Config

Targets

    • Target

      79258a91193e598bda2bda0c75f957bc695cdd8c40448ec7b49609d1c27aebdb

    • Size

      195KB

    • MD5

      1bef6c2691cfbc12015ced39bec0cf3b

    • SHA1

      5f3e1977e9d33b016730f33dde4a579fcb90df6e

    • SHA256

      79258a91193e598bda2bda0c75f957bc695cdd8c40448ec7b49609d1c27aebdb

    • SHA512

      32dec1d210b636779451156c776fa2c0b525a04e50574438715990eae1884d93b77dfe487f1dc69161d796113526c4f524aa7b7634ff324fef7dbeeb056e3f10

    • SSDEEP

      3072:XX5F2zO9GLgC1XdMxo5qaFfP1lcr7tmDhfg4DmZhLP:H9YLBdM3iP1lcr7tCftG

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Deletes itself

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks