Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    file.exe

  • Size

    207KB

  • Sample

    230115-b1tbhscb8z

  • MD5

    a82c05a968ad2657181e7813c6fddd48

  • SHA1

    836a8f9f8013da945d3a6b8754d28b1ca3ff107b

  • SHA256

    3b8dfb9811e12f5f0c2d35030f7350c5977c5ecd3c6981a1a6515f2a74088a87

  • SHA512

    961bcf8eaffce43fb582991688120f814fe17b4dc788ad0deecf7414d2e44b9092316e83a115c7eae4ad79cf813a2e2187ca5352ed63c13fc6a6d1962138f6fd

  • SSDEEP

    3072:vXtPpMQjnYFeHPFLnOUA5ecsuLqZGJOzCqV6UvSTXUAxNapb:frNjnYFe9LnOUNHuLqZGJwdV6YI2p

Malware Config

Targets

    • Target

      file.exe

    • Size

      207KB

    • MD5

      a82c05a968ad2657181e7813c6fddd48

    • SHA1

      836a8f9f8013da945d3a6b8754d28b1ca3ff107b

    • SHA256

      3b8dfb9811e12f5f0c2d35030f7350c5977c5ecd3c6981a1a6515f2a74088a87

    • SHA512

      961bcf8eaffce43fb582991688120f814fe17b4dc788ad0deecf7414d2e44b9092316e83a115c7eae4ad79cf813a2e2187ca5352ed63c13fc6a6d1962138f6fd

    • SSDEEP

      3072:vXtPpMQjnYFeHPFLnOUA5ecsuLqZGJOzCqV6UvSTXUAxNapb:frNjnYFe9LnOUNHuLqZGJwdV6YI2p

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks