Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    file.exe

  • Size

    294KB

  • Sample

    230131-p8metsac51

  • MD5

    c145ad28e78d37544f6e4f60ba20a5d4

  • SHA1

    d27991ec88ee934dbfa0f81f9f394f52a2dc9c8b

  • SHA256

    09d5443877e9b4d3152509801503065854eaaf49fbb492ab29cc94973bb3109d

  • SHA512

    f1ad96f77e036c59e3288fadc26e8564b941714383b7bb9a768f4573289635e3e671ef60db1dab389d912ff3cc501895fec3249fbfe126383577ceee3a987645

  • SSDEEP

    3072:sauvM7CLCLRo2sw5TXUX8he5UmGMNqsUOZM7Gx7f43H7BF6/85RCqx:8k7CLCi2swljhe5UpiZ1x7f4Vc/87

Malware Config

Targets

    • Target

      file.exe

    • Size

      294KB

    • MD5

      c145ad28e78d37544f6e4f60ba20a5d4

    • SHA1

      d27991ec88ee934dbfa0f81f9f394f52a2dc9c8b

    • SHA256

      09d5443877e9b4d3152509801503065854eaaf49fbb492ab29cc94973bb3109d

    • SHA512

      f1ad96f77e036c59e3288fadc26e8564b941714383b7bb9a768f4573289635e3e671ef60db1dab389d912ff3cc501895fec3249fbfe126383577ceee3a987645

    • SSDEEP

      3072:sauvM7CLCLRo2sw5TXUX8he5UmGMNqsUOZM7Gx7f43H7BF6/85RCqx:8k7CLCi2swljhe5UpiZ1x7f4Vc/87

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks