Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    15c5c832b28cd8fced64386cb021d28223a08c8ded248dd13863abfd2974b06e

  • Size

    322KB

  • Sample

    230208-w7xyhade3x

  • MD5

    197878f44a5a771680a02dde0a2ecfa8

  • SHA1

    97150aef0c1359e913e7542818fb28178be49bfe

  • SHA256

    15c5c832b28cd8fced64386cb021d28223a08c8ded248dd13863abfd2974b06e

  • SHA512

    d11031048e87797d9ab8e5d0d2352f4873a7e84df8196fe52c5914266e1ef874b9ced1babc8416921a19ed6f6aab78b1d0d0174f4a065dd468127de5de507127

  • SSDEEP

    3072:pPg8SK2yzxR9z0yR579koDIH9vOa1L6BjF4B2sWQDiuLpN2yvJ:pvyy5z15GoMHopBcjLiqkyvJ

Malware Config

Targets

    • Target

      15c5c832b28cd8fced64386cb021d28223a08c8ded248dd13863abfd2974b06e

    • Size

      322KB

    • MD5

      197878f44a5a771680a02dde0a2ecfa8

    • SHA1

      97150aef0c1359e913e7542818fb28178be49bfe

    • SHA256

      15c5c832b28cd8fced64386cb021d28223a08c8ded248dd13863abfd2974b06e

    • SHA512

      d11031048e87797d9ab8e5d0d2352f4873a7e84df8196fe52c5914266e1ef874b9ced1babc8416921a19ed6f6aab78b1d0d0174f4a065dd468127de5de507127

    • SSDEEP

      3072:pPg8SK2yzxR9z0yR579koDIH9vOa1L6BjF4B2sWQDiuLpN2yvJ:pvyy5z15GoMHopBcjLiqkyvJ

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks