Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    e37ae8d9066fa8238f2197da00c89b5607c6cca41c05d385d1ba82531385f228

  • Size

    187KB

  • Sample

    230212-se3fqseb8w

  • MD5

    f7939a50799a524d23fefef088a71317

  • SHA1

    27363be02bf634d233ba9e43678e5dd9318c8aeb

  • SHA256

    e37ae8d9066fa8238f2197da00c89b5607c6cca41c05d385d1ba82531385f228

  • SHA512

    034778d6f4e30fac9415bd8ad2b5bab26c2d50e27c9b74e3b4de5bd66246fec50984e691a3fdb7be45d493d8ca6edaa65ed7cd1f59d50d779b0a6957fc745e8c

  • SSDEEP

    3072:z7Cg+rGQP5i2W5XfSuGsfEU32XN7z4OuX0RFQWUpKCQhuFc:P3LJJJmsH32XNwtOQHKW

Malware Config

Targets

    • Target

      e37ae8d9066fa8238f2197da00c89b5607c6cca41c05d385d1ba82531385f228

    • Size

      187KB

    • MD5

      f7939a50799a524d23fefef088a71317

    • SHA1

      27363be02bf634d233ba9e43678e5dd9318c8aeb

    • SHA256

      e37ae8d9066fa8238f2197da00c89b5607c6cca41c05d385d1ba82531385f228

    • SHA512

      034778d6f4e30fac9415bd8ad2b5bab26c2d50e27c9b74e3b4de5bd66246fec50984e691a3fdb7be45d493d8ca6edaa65ed7cd1f59d50d779b0a6957fc745e8c

    • SSDEEP

      3072:z7Cg+rGQP5i2W5XfSuGsfEU32XN7z4OuX0RFQWUpKCQhuFc:P3LJJJmsH32XNwtOQHKW

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks