Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a0867fb7bbd71e751ecceebe35fb1b719aad4584b63ede2c7ec0572fd421a227

  • Size

    325KB

  • Sample

    230206-pz1wvshb9t

  • MD5

    94403ce55c6f8fb5c97cd6336e3b898d

  • SHA1

    e583108f92c4588da6d7707cc0012b8305279cdd

  • SHA256

    a0867fb7bbd71e751ecceebe35fb1b719aad4584b63ede2c7ec0572fd421a227

  • SHA512

    44f597b06744471059a3cc9c4b1918be38f56e3320b71d90ea133a35cd4e2a8a32424032948127a0d04e6509edba84aca6f19f532280a7d3c0fbd7337c425a76

  • SSDEEP

    6144:6IqLHfA0c++4WJI2c5CiGFOQ24obKuk6oOI:6IqTfA8WSTHGEk6Kr2I

Malware Config

Targets

    • Target

      a0867fb7bbd71e751ecceebe35fb1b719aad4584b63ede2c7ec0572fd421a227

    • Size

      325KB

    • MD5

      94403ce55c6f8fb5c97cd6336e3b898d

    • SHA1

      e583108f92c4588da6d7707cc0012b8305279cdd

    • SHA256

      a0867fb7bbd71e751ecceebe35fb1b719aad4584b63ede2c7ec0572fd421a227

    • SHA512

      44f597b06744471059a3cc9c4b1918be38f56e3320b71d90ea133a35cd4e2a8a32424032948127a0d04e6509edba84aca6f19f532280a7d3c0fbd7337c425a76

    • SSDEEP

      6144:6IqLHfA0c++4WJI2c5CiGFOQ24obKuk6oOI:6IqTfA8WSTHGEk6Kr2I

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks