Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    9af40cb65522ef1f2ae830ef235310b2f04f91497ec26453d17fd24989fe4949

  • Size

    196KB

  • Sample

    230211-wp8bhsec86

  • MD5

    403b5eeb9353d939fe0e2fd053fdfc8a

  • SHA1

    a6abdc26c2c5d4f95c959ce9c083278429870ae0

  • SHA256

    9af40cb65522ef1f2ae830ef235310b2f04f91497ec26453d17fd24989fe4949

  • SHA512

    5364bbabfac59644a4bd7e04283d2cd3c7f2645d665a77955f5de03f2babf8f5fcaa00266a93e785a0e2ed787720651662bb97a5796693192d7c40e3ce6c0556

  • SSDEEP

    3072:PlKt+IJ+5es3XGHwCjNLalhraotE9poCPVrGAlnR7dpz/A3wlPte:tYnJRsHGQsBaz+brPlndT/lP

Malware Config

Targets

    • Target

      9af40cb65522ef1f2ae830ef235310b2f04f91497ec26453d17fd24989fe4949

    • Size

      196KB

    • MD5

      403b5eeb9353d939fe0e2fd053fdfc8a

    • SHA1

      a6abdc26c2c5d4f95c959ce9c083278429870ae0

    • SHA256

      9af40cb65522ef1f2ae830ef235310b2f04f91497ec26453d17fd24989fe4949

    • SHA512

      5364bbabfac59644a4bd7e04283d2cd3c7f2645d665a77955f5de03f2babf8f5fcaa00266a93e785a0e2ed787720651662bb97a5796693192d7c40e3ce6c0556

    • SSDEEP

      3072:PlKt+IJ+5es3XGHwCjNLalhraotE9poCPVrGAlnR7dpz/A3wlPte:tYnJRsHGQsBaz+brPlndT/lP

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks