Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a717546b8a3cbed8f6b43a9b989de4738a1b912cd07e3e7879c8d8a4684877f2

  • Size

    108KB

  • Sample

    221030-rxam1afdcq

  • MD5

    92d9fc66cd8a4f01a353866351216d98

  • SHA1

    6087791e7e885f02a793da01f54b28a15811e6a1

  • SHA256

    a717546b8a3cbed8f6b43a9b989de4738a1b912cd07e3e7879c8d8a4684877f2

  • SHA512

    3ff15b141a5d6ab813eee239ff33af3b62aa89bf7aeaa07d97e28fde27efb32f6884b997beb4c6fa810edcd123e16b7df8039865df2ea521054fb0a784377adb

  • SSDEEP

    3072:y1+MJKrUnFYY5z1i0Nmbi5fJBN5A5out:yIrPj0NmWtNkoS

Malware Config

Targets

    • Target

      a717546b8a3cbed8f6b43a9b989de4738a1b912cd07e3e7879c8d8a4684877f2

    • Size

      108KB

    • MD5

      92d9fc66cd8a4f01a353866351216d98

    • SHA1

      6087791e7e885f02a793da01f54b28a15811e6a1

    • SHA256

      a717546b8a3cbed8f6b43a9b989de4738a1b912cd07e3e7879c8d8a4684877f2

    • SHA512

      3ff15b141a5d6ab813eee239ff33af3b62aa89bf7aeaa07d97e28fde27efb32f6884b997beb4c6fa810edcd123e16b7df8039865df2ea521054fb0a784377adb

    • SSDEEP

      3072:y1+MJKrUnFYY5z1i0Nmbi5fJBN5A5out:yIrPj0NmWtNkoS

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • UAC bypass

    • ModiLoader Second Stage

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Loads dropped DLL

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v6

Tasks