Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    59f67b22734a0d7d1b5e449accb320cb286ab31c81f115fda9c0f4fd64e3b8cd

  • Size

    118KB

  • Sample

    221129-qsewgsdc28

  • MD5

    3b1cd570a2d5c79b045845c1a92d760f

  • SHA1

    7798f2417524bc92fc45b14b83352218a7d196e2

  • SHA256

    59f67b22734a0d7d1b5e449accb320cb286ab31c81f115fda9c0f4fd64e3b8cd

  • SHA512

    7247669eb26f0d88f9dec7dab3e9ea8a4fb2fe1b8f17337ecd4d3df4d8854123997f67ea22bd1f0f5be33ac72f1cb2daa1f2427b0f9b19c46b68b1a5061a31c2

  • SSDEEP

    3072:veovXPoYcswp7Uclw3BwQaq9NUS002exHout8/:GovQYjwpU8OB3aq7x09exoS8

Malware Config

Targets

    • Target

      59f67b22734a0d7d1b5e449accb320cb286ab31c81f115fda9c0f4fd64e3b8cd

    • Size

      118KB

    • MD5

      3b1cd570a2d5c79b045845c1a92d760f

    • SHA1

      7798f2417524bc92fc45b14b83352218a7d196e2

    • SHA256

      59f67b22734a0d7d1b5e449accb320cb286ab31c81f115fda9c0f4fd64e3b8cd

    • SHA512

      7247669eb26f0d88f9dec7dab3e9ea8a4fb2fe1b8f17337ecd4d3df4d8854123997f67ea22bd1f0f5be33ac72f1cb2daa1f2427b0f9b19c46b68b1a5061a31c2

    • SSDEEP

      3072:veovXPoYcswp7Uclw3BwQaq9NUS002exHout8/:GovQYjwpU8OB3aq7x09exoS8

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • UAC bypass

    • ModiLoader Second Stage

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Loads dropped DLL

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v6

Tasks