Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    59e34cb366ebffc7fc8cadc47d6871120749bc497f8259b18daa7cb383024b03

  • Size

    194KB

  • Sample

    230203-vhy9lagb84

  • MD5

    1fc3fdb9a398a929082ddbcf2236fa3a

  • SHA1

    1059f5dd9fd0037534abe63051b41c78755a8e6c

  • SHA256

    59e34cb366ebffc7fc8cadc47d6871120749bc497f8259b18daa7cb383024b03

  • SHA512

    ba7947d66830f519b94a9a57d4db4c26279b0717f4d470acd4b9a50d3d630ea12a5a0059c207fec60f2098264db65aba6c186dbc87a4cbc9721bb856c4eb3885

  • SSDEEP

    3072:gegyDMDk7Xgr+L0jXsuLW885Hzzka6iOnTvtfoQZxZIQz8GFYjFv:geWBr+LyXzLszo3PnjcQzPKv

Malware Config

Targets

    • Target

      59e34cb366ebffc7fc8cadc47d6871120749bc497f8259b18daa7cb383024b03

    • Size

      194KB

    • MD5

      1fc3fdb9a398a929082ddbcf2236fa3a

    • SHA1

      1059f5dd9fd0037534abe63051b41c78755a8e6c

    • SHA256

      59e34cb366ebffc7fc8cadc47d6871120749bc497f8259b18daa7cb383024b03

    • SHA512

      ba7947d66830f519b94a9a57d4db4c26279b0717f4d470acd4b9a50d3d630ea12a5a0059c207fec60f2098264db65aba6c186dbc87a4cbc9721bb856c4eb3885

    • SSDEEP

      3072:gegyDMDk7Xgr+L0jXsuLW885Hzzka6iOnTvtfoQZxZIQz8GFYjFv:geWBr+LyXzLszo3PnjcQzPKv

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks