Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    fa0c5f16c7c78823b721cca2e63b6c2723379d0748cd0465a7718f8d4d88a940

  • Size

    299KB

  • Sample

    230131-3zw5kaba35

  • MD5

    3b8cb18a3aa1dd5e3eff31da2fd1aebf

  • SHA1

    e31f217df449ca9216130f6d8c7749f864b864fa

  • SHA256

    fa0c5f16c7c78823b721cca2e63b6c2723379d0748cd0465a7718f8d4d88a940

  • SHA512

    f4d28c56c09b446f0b40a8db51da92a6a5ccfa28ecbfa01283da6ad4237802cfdb43965273ef6a1545a3367a153151ef33d63096b6d116345522413e044df9e1

  • SSDEEP

    3072:Tznvz4LPqXRskmG/or72vePGedSLq5lao4WdMIQZKmqPUx6WfQz86YpRi3MM5A:Xz4LP9v2mPGa5/r2IHmqMoIdpg8M5

Malware Config

Targets

    • Target

      fa0c5f16c7c78823b721cca2e63b6c2723379d0748cd0465a7718f8d4d88a940

    • Size

      299KB

    • MD5

      3b8cb18a3aa1dd5e3eff31da2fd1aebf

    • SHA1

      e31f217df449ca9216130f6d8c7749f864b864fa

    • SHA256

      fa0c5f16c7c78823b721cca2e63b6c2723379d0748cd0465a7718f8d4d88a940

    • SHA512

      f4d28c56c09b446f0b40a8db51da92a6a5ccfa28ecbfa01283da6ad4237802cfdb43965273ef6a1545a3367a153151ef33d63096b6d116345522413e044df9e1

    • SSDEEP

      3072:Tznvz4LPqXRskmG/or72vePGedSLq5lao4WdMIQZKmqPUx6WfQz86YpRi3MM5A:Xz4LP9v2mPGa5/r2IHmqMoIdpg8M5

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks