Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.1420b7348a453ccbcd1b249e6067d7d0.exe

  • Size

    112KB

  • Sample

    231103-tnabzsee3s

  • MD5

    1420b7348a453ccbcd1b249e6067d7d0

  • SHA1

    307b47994c84b9eb3a2373fb9a807b9c6c69730a

  • SHA256

    62ba77eac3136b0ecf90f0bd8655b7318eb3ca5512c26658b955a4b8b69c3fa5

  • SHA512

    1f12f93928f9a0649fd1e0ee85b0e1a59e868f433c9cea4a5f8bf30d3ed562cb4047138fec92ba28be4ad3d58dfd18597857f4f57b5e76a84a91fa747eb7d260

  • SSDEEP

    1536:OxSq3EDGvJCUCMAzZi8300d6c0+FvmgyIhmchKwC:OPAGJCUCrs8k0d6cegr1hKw

Malware Config

Targets

    • Target

      NEAS.1420b7348a453ccbcd1b249e6067d7d0.exe

    • Size

      112KB

    • MD5

      1420b7348a453ccbcd1b249e6067d7d0

    • SHA1

      307b47994c84b9eb3a2373fb9a807b9c6c69730a

    • SHA256

      62ba77eac3136b0ecf90f0bd8655b7318eb3ca5512c26658b955a4b8b69c3fa5

    • SHA512

      1f12f93928f9a0649fd1e0ee85b0e1a59e868f433c9cea4a5f8bf30d3ed562cb4047138fec92ba28be4ad3d58dfd18597857f4f57b5e76a84a91fa747eb7d260

    • SSDEEP

      1536:OxSq3EDGvJCUCMAzZi8300d6c0+FvmgyIhmchKwC:OPAGJCUCrs8k0d6cegr1hKw

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks