Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    6e2f7726ce14f9bd1d6d803e1ebea5e63df1c270c67d4e4812bd6ae6cad16ca8

  • Size

    178KB

  • Sample

    230214-nbz4zscc4s

  • MD5

    ab2c6b2cee949fb8dbed37b50e6da8fa

  • SHA1

    eb77b7f60eb906206485f75a44075472cfc73e30

  • SHA256

    6e2f7726ce14f9bd1d6d803e1ebea5e63df1c270c67d4e4812bd6ae6cad16ca8

  • SHA512

    77f443d90acde722f57796bf5c5e82cf2d803c724538835a2239e9c69a0f491d4bc265e58ea894cd80e2b8021a0f4b60ee97f5fd56866157d944b1469fded088

  • SSDEEP

    3072:2o53LZLT5nnKQlvXl7o+BniPr9xTbFTC5yltIOS+3Q2cfOa:1VLZLNnKQlflosij9xTZTRXzSMQhF

Malware Config

Targets

    • Target

      6e2f7726ce14f9bd1d6d803e1ebea5e63df1c270c67d4e4812bd6ae6cad16ca8

    • Size

      178KB

    • MD5

      ab2c6b2cee949fb8dbed37b50e6da8fa

    • SHA1

      eb77b7f60eb906206485f75a44075472cfc73e30

    • SHA256

      6e2f7726ce14f9bd1d6d803e1ebea5e63df1c270c67d4e4812bd6ae6cad16ca8

    • SHA512

      77f443d90acde722f57796bf5c5e82cf2d803c724538835a2239e9c69a0f491d4bc265e58ea894cd80e2b8021a0f4b60ee97f5fd56866157d944b1469fded088

    • SSDEEP

      3072:2o53LZLT5nnKQlvXl7o+BniPr9xTbFTC5yltIOS+3Q2cfOa:1VLZLNnKQlflosij9xTZTRXzSMQhF

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks