Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    file.exe

  • Size

    284KB

  • Sample

    230206-ag6xtsbd67

  • MD5

    9a2cbe292f23929477d46e4f632ff05a

  • SHA1

    716ae5cc6ef61ba4296f75bbf8e45dd25273966f

  • SHA256

    bb9ca75b5e96628ac29a9b14e413198eeaa14cd620ca998cbdc435cbe19cd749

  • SHA512

    fab00cda107e058554fe0d13380d2aa054e09aafe5683b0b7ff36ea6f4eb4862214572c25f04f85bfde9e06dc1be62ea27fb19705458a719b5d8996243861a42

  • SSDEEP

    3072:1WaaOLucZgC822PLDZjgEWL/+I554lYQkCd6DHQ3BUIDWdBjuRs:kaaUGZLDZ8ETRlYtCqHQ3/WLC

Malware Config

Targets

    • Target

      file.exe

    • Size

      284KB

    • MD5

      9a2cbe292f23929477d46e4f632ff05a

    • SHA1

      716ae5cc6ef61ba4296f75bbf8e45dd25273966f

    • SHA256

      bb9ca75b5e96628ac29a9b14e413198eeaa14cd620ca998cbdc435cbe19cd749

    • SHA512

      fab00cda107e058554fe0d13380d2aa054e09aafe5683b0b7ff36ea6f4eb4862214572c25f04f85bfde9e06dc1be62ea27fb19705458a719b5d8996243861a42

    • SSDEEP

      3072:1WaaOLucZgC822PLDZjgEWL/+I554lYQkCd6DHQ3BUIDWdBjuRs:kaaUGZLDZ8ETRlYtCqHQ3/WLC

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks