Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    file.exe

  • Size

    283KB

  • Sample

    230113-h5hh5sfb55

  • MD5

    7edb3bf162fff8c303399ed7ad6a359c

  • SHA1

    fbe48adcbd7581ff7682c95f45dfb6a7d92b3153

  • SHA256

    ff4ca465d6f26292f71028d0d0a9f78234a74af966067adc7153ba7aa81e6136

  • SHA512

    00c21c294770286f8697744c1753d7e4bdca3d3e761cce3f5ed825d1b0a63d5cf73dd2b5878da73a8ad872952e08c2333a307107feff68c8e36c50b42ad2aa14

  • SSDEEP

    6144:VTBLDH4xl6wtAUvsZhj9Rn3vuZzxEmXCgyGpK3:VTBHH4x7tAUvsZR9R3mZznSC

Malware Config

Targets

    • Target

      file.exe

    • Size

      283KB

    • MD5

      7edb3bf162fff8c303399ed7ad6a359c

    • SHA1

      fbe48adcbd7581ff7682c95f45dfb6a7d92b3153

    • SHA256

      ff4ca465d6f26292f71028d0d0a9f78234a74af966067adc7153ba7aa81e6136

    • SHA512

      00c21c294770286f8697744c1753d7e4bdca3d3e761cce3f5ed825d1b0a63d5cf73dd2b5878da73a8ad872952e08c2333a307107feff68c8e36c50b42ad2aa14

    • SSDEEP

      6144:VTBLDH4xl6wtAUvsZhj9Rn3vuZzxEmXCgyGpK3:VTBHH4x7tAUvsZR9R3mZznSC

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks