Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    8c03948c4d2825a3808f74a5d0b32de637f290b8e8a557386771414d9f256b5e

  • Size

    213KB

  • Sample

    230105-wvpflagc6t

  • MD5

    c6aac2239f973d8e45ebb942f8df96c6

  • SHA1

    1cd936198cc1ce102a48bf4eb642c6a742959dd9

  • SHA256

    8c03948c4d2825a3808f74a5d0b32de637f290b8e8a557386771414d9f256b5e

  • SHA512

    8d3718f3063bdb1591abf9bcd6451cd1ba76b9f41cd9ab2a183a5caff4c1c57e2b9c3b068e93ff1e3a7d7cb12ca627a74b5251e82e32ea979583f93772a7f2f0

  • SSDEEP

    3072:JxaXhNuoLPLqTJrTXLX8SP5TvBlrCv7mAcwYehGPFU:L6FTLqTpLX8GPrI7RcpeqF

Malware Config

Targets

    • Target

      8c03948c4d2825a3808f74a5d0b32de637f290b8e8a557386771414d9f256b5e

    • Size

      213KB

    • MD5

      c6aac2239f973d8e45ebb942f8df96c6

    • SHA1

      1cd936198cc1ce102a48bf4eb642c6a742959dd9

    • SHA256

      8c03948c4d2825a3808f74a5d0b32de637f290b8e8a557386771414d9f256b5e

    • SHA512

      8d3718f3063bdb1591abf9bcd6451cd1ba76b9f41cd9ab2a183a5caff4c1c57e2b9c3b068e93ff1e3a7d7cb12ca627a74b5251e82e32ea979583f93772a7f2f0

    • SSDEEP

      3072:JxaXhNuoLPLqTJrTXLX8SP5TvBlrCv7mAcwYehGPFU:L6FTLqTpLX8GPrI7RcpeqF

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks