Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    19a93190269b2709515eefb437ea294929e9a7d2906a25c00ba5d7e61acde056

  • Size

    195KB

  • Sample

    230211-yssrcagb6y

  • MD5

    87066c8e86c1c1e8b865ec7440ff04a8

  • SHA1

    df165881d60e4423dc0e89e0ad74423cacbc48d9

  • SHA256

    19a93190269b2709515eefb437ea294929e9a7d2906a25c00ba5d7e61acde056

  • SHA512

    89415f4b1e350cd0fae144209f7c042a2b790ba30a585d55cc39446fbce3318ddd0a538e6ec7890db9269f3b2d5e164a2dd5be9aec559df0c36452d92ca47cb8

  • SSDEEP

    3072:xl495H+UJzRR4TU5efFxP9nSdbQsGCA9qIZdfxxte:DOBjJlQpmbQ2IZdfL

Malware Config

Targets

    • Target

      19a93190269b2709515eefb437ea294929e9a7d2906a25c00ba5d7e61acde056

    • Size

      195KB

    • MD5

      87066c8e86c1c1e8b865ec7440ff04a8

    • SHA1

      df165881d60e4423dc0e89e0ad74423cacbc48d9

    • SHA256

      19a93190269b2709515eefb437ea294929e9a7d2906a25c00ba5d7e61acde056

    • SHA512

      89415f4b1e350cd0fae144209f7c042a2b790ba30a585d55cc39446fbce3318ddd0a538e6ec7890db9269f3b2d5e164a2dd5be9aec559df0c36452d92ca47cb8

    • SSDEEP

      3072:xl495H+UJzRR4TU5efFxP9nSdbQsGCA9qIZdfxxte:DOBjJlQpmbQ2IZdfL

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Deletes itself

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks