Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    22e7ff1fa5bff1b2b42683e9cc0831638e830276271105c3ce98c5e8980af098

  • Size

    284KB

  • Sample

    230206-b7kb7afa8t

  • MD5

    5d986c1c522a395da2501ed611c70d4d

  • SHA1

    fd0bb7e04691a04688d867d99281896106e845be

  • SHA256

    22e7ff1fa5bff1b2b42683e9cc0831638e830276271105c3ce98c5e8980af098

  • SHA512

    c99a7b558fb589edecbf4368b2e54a4ad2571b7b39092a6dcb8f7b9e6b1e6f0d2fb33836b228e570987a80f210af727d26daf68dd1263a9436456f0056fb9379

  • SSDEEP

    3072:oWaDOEuFdI8iSMLQtoJWvP+F56Hd9r/Rf3VIOCSULJZzI2WR4rTs:BaDH5zLQ2JPirl/VNUvcHR2

Malware Config

Targets

    • Target

      22e7ff1fa5bff1b2b42683e9cc0831638e830276271105c3ce98c5e8980af098

    • Size

      284KB

    • MD5

      5d986c1c522a395da2501ed611c70d4d

    • SHA1

      fd0bb7e04691a04688d867d99281896106e845be

    • SHA256

      22e7ff1fa5bff1b2b42683e9cc0831638e830276271105c3ce98c5e8980af098

    • SHA512

      c99a7b558fb589edecbf4368b2e54a4ad2571b7b39092a6dcb8f7b9e6b1e6f0d2fb33836b228e570987a80f210af727d26daf68dd1263a9436456f0056fb9379

    • SSDEEP

      3072:oWaDOEuFdI8iSMLQtoJWvP+F56Hd9r/Rf3VIOCSULJZzI2WR4rTs:BaDH5zLQ2JPirl/VNUvcHR2

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks