Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    8b833a65aa211e8c3d50245be670dee1326333c71d8f4d17cf108df28c3f4f9b

  • Size

    225KB

  • Sample

    230201-q4l4yahf56

  • MD5

    19b3bb5e1b49fae5683771a114eb2b54

  • SHA1

    0e090e04a3ec9b4617968193ab43f94f13fc80e1

  • SHA256

    8b833a65aa211e8c3d50245be670dee1326333c71d8f4d17cf108df28c3f4f9b

  • SHA512

    bce104e72a015b4c5ae7aa18f6d50ec1b013184a3a1fc17839e2950e2639be39de8343dba4c701101784b2b56324498a438dec6d7a2f7a1e10223c3aed3f0d63

  • SSDEEP

    6144:xmPx8X8hLNI/n9A93N5Ip0wTuRMbwrPn:xm5FxI/9A9wpFTu+bwrP

Malware Config

Targets

    • Target

      8b833a65aa211e8c3d50245be670dee1326333c71d8f4d17cf108df28c3f4f9b

    • Size

      225KB

    • MD5

      19b3bb5e1b49fae5683771a114eb2b54

    • SHA1

      0e090e04a3ec9b4617968193ab43f94f13fc80e1

    • SHA256

      8b833a65aa211e8c3d50245be670dee1326333c71d8f4d17cf108df28c3f4f9b

    • SHA512

      bce104e72a015b4c5ae7aa18f6d50ec1b013184a3a1fc17839e2950e2639be39de8343dba4c701101784b2b56324498a438dec6d7a2f7a1e10223c3aed3f0d63

    • SSDEEP

      6144:xmPx8X8hLNI/n9A93N5Ip0wTuRMbwrPn:xm5FxI/9A9wpFTu+bwrP

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

MITRE ATT&CK Enterprise v6

Tasks