Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    file.exe

  • Size

    267KB

  • Sample

    230112-p47j7sbg4t

  • MD5

    9d2b0c6fe0ab2dfeac298139e55f042b

  • SHA1

    f5e98d17880c37563dff7a5a11ad93c7e8456764

  • SHA256

    22efc679e78d1ed3d4072223959004b037c85218c8fb7fd41d841b1d43050e9f

  • SHA512

    5f777aa20cdb4d3dcefde9e92a14897c3b446c8033d57eff736273520a9e714c6752f91d9a10ce03d9ee4dec184d4bed4ef1901448485cbe797d9632b5c6c0ad

  • SSDEEP

    3072:TPXE2L6qvLQvHZrh25j3/gDQslLfEHxT7hBP3qPx76b5qWbyajt:bRLirha3/1sJeTvPa5gq+

Malware Config

Targets

    • Target

      file.exe

    • Size

      267KB

    • MD5

      9d2b0c6fe0ab2dfeac298139e55f042b

    • SHA1

      f5e98d17880c37563dff7a5a11ad93c7e8456764

    • SHA256

      22efc679e78d1ed3d4072223959004b037c85218c8fb7fd41d841b1d43050e9f

    • SHA512

      5f777aa20cdb4d3dcefde9e92a14897c3b446c8033d57eff736273520a9e714c6752f91d9a10ce03d9ee4dec184d4bed4ef1901448485cbe797d9632b5c6c0ad

    • SSDEEP

      3072:TPXE2L6qvLQvHZrh25j3/gDQslLfEHxT7hBP3qPx76b5qWbyajt:bRLirha3/1sJeTvPa5gq+

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks