Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    035f6d6a187b809b4e8a5f6a051ed61feb015c52c912a9578933358ea2c5b9ab

  • Size

    186KB

  • Sample

    230130-kyxetsbd6x

  • MD5

    029c166a222849e8b3f469a898a007e2

  • SHA1

    3eddb679c6156becfd53260cfb9b9de22803c588

  • SHA256

    035f6d6a187b809b4e8a5f6a051ed61feb015c52c912a9578933358ea2c5b9ab

  • SHA512

    739c9ff27e94300818221c9472ded44caa5a0286b5a7237cce9dae2159679e0954b8327528d43412cd979cc2099453cca04e7b33f195e780708388c0d32e0b4f

  • SSDEEP

    3072:3IeKY1XwLHC2Y5+5+eW3wrAT5YmxVj4Ipgm7mmNf2BUqF:b1XwLvY5ZeWys1RpJCecU

Malware Config

Targets

    • Target

      035f6d6a187b809b4e8a5f6a051ed61feb015c52c912a9578933358ea2c5b9ab

    • Size

      186KB

    • MD5

      029c166a222849e8b3f469a898a007e2

    • SHA1

      3eddb679c6156becfd53260cfb9b9de22803c588

    • SHA256

      035f6d6a187b809b4e8a5f6a051ed61feb015c52c912a9578933358ea2c5b9ab

    • SHA512

      739c9ff27e94300818221c9472ded44caa5a0286b5a7237cce9dae2159679e0954b8327528d43412cd979cc2099453cca04e7b33f195e780708388c0d32e0b4f

    • SSDEEP

      3072:3IeKY1XwLHC2Y5+5+eW3wrAT5YmxVj4Ipgm7mmNf2BUqF:b1XwLvY5ZeWys1RpJCecU

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks