Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0c5a8b9476d0dfac33e144f79e1cdcf5aeb9c54dd30d3ebdcff10f25abab3c52

  • Size

    193KB

  • Sample

    230213-rkdh5adb3t

  • MD5

    3017411d25c4e01a26bb132300855db9

  • SHA1

    d1e4b9dcb0c4ee076a7b7ce4ccf1bafa04862f66

  • SHA256

    0c5a8b9476d0dfac33e144f79e1cdcf5aeb9c54dd30d3ebdcff10f25abab3c52

  • SHA512

    e6c51114efb58eea64579b0e643a6f2ec67cd48f35c2b0c1c2866ecb11b85f7839f6a96385b8137214aaeaaabada9e1144bd579bb4a3beaf740fbb279feb698b

  • SSDEEP

    3072:nuBNcLDk9N3tlQoxx8QtbjQ5/PfzUunMggsDsv5BEg8xHCWPy3:nCWD63bQoxxztbUhPfz3q5G9CW

Malware Config

Targets

    • Target

      0c5a8b9476d0dfac33e144f79e1cdcf5aeb9c54dd30d3ebdcff10f25abab3c52

    • Size

      193KB

    • MD5

      3017411d25c4e01a26bb132300855db9

    • SHA1

      d1e4b9dcb0c4ee076a7b7ce4ccf1bafa04862f66

    • SHA256

      0c5a8b9476d0dfac33e144f79e1cdcf5aeb9c54dd30d3ebdcff10f25abab3c52

    • SHA512

      e6c51114efb58eea64579b0e643a6f2ec67cd48f35c2b0c1c2866ecb11b85f7839f6a96385b8137214aaeaaabada9e1144bd579bb4a3beaf740fbb279feb698b

    • SSDEEP

      3072:nuBNcLDk9N3tlQoxx8QtbjQ5/PfzUunMggsDsv5BEg8xHCWPy3:nCWD63bQoxxztbUhPfz3q5G9CW

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks