Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    file.exe

  • Size

    210KB

  • Sample

    230115-z5k3psgd2v

  • MD5

    67ce6abdd45cc8eeb5521c8a380c7fd2

  • SHA1

    4ce9be4f42366057e176f12683f62453157c79f3

  • SHA256

    8766c2a59b2c0c90d0803fa76287cb79a9ea980d2be8bf3008750286ca20c8f6

  • SHA512

    448a48fae32dc4be08880239b87f9ca51ad4c974cccb9ec460f7765db69727bddcebe505fed9a3c037a1ec7e43c003673d32b5775db2098987f971e70baac24b

  • SSDEEP

    1536:YCQukO0Hpxdd27hM11YCYSPg9layLeFd55WluJzGVq8+WyuLOLJMcT/Yw8cDovI9:YCXj0HMAFd5sZO7NQtcUvNDny6Rxi

Malware Config

Targets

    • Target

      file.exe

    • Size

      210KB

    • MD5

      67ce6abdd45cc8eeb5521c8a380c7fd2

    • SHA1

      4ce9be4f42366057e176f12683f62453157c79f3

    • SHA256

      8766c2a59b2c0c90d0803fa76287cb79a9ea980d2be8bf3008750286ca20c8f6

    • SHA512

      448a48fae32dc4be08880239b87f9ca51ad4c974cccb9ec460f7765db69727bddcebe505fed9a3c037a1ec7e43c003673d32b5775db2098987f971e70baac24b

    • SSDEEP

      1536:YCQukO0Hpxdd27hM11YCYSPg9layLeFd55WluJzGVq8+WyuLOLJMcT/Yw8cDovI9:YCXj0HMAFd5sZO7NQtcUvNDny6Rxi

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks