Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    5299562a1400d9de465f3253a8b6e84b

  • Size

    33KB

  • Sample

    231226-ely51acdc5

  • MD5

    5299562a1400d9de465f3253a8b6e84b

  • SHA1

    222c7f74e05f153a32638268f6dcd36c9cc676ea

  • SHA256

    99292ea955b5f3af6268117b236f6e64ef9d10b082d382d95e79e1bb75e7e260

  • SHA512

    d87373ce2c832e9c1dc2fa52e178d0d48ad82faf4859a599589f092b2879a949f2b05759283e325f01d95061c8f66a008178ed4393cddade26c2ce59e99b068d

  • SSDEEP

    384:fjeLOnMIwQZOG0tsCQCd89cPDDCm7wLHUQzp3C05NJ8RekSTOn1nzHRiFb1Y1PnN:fH7R0am7q/555NJ9kSTOnVaK6400

Malware Config

Targets

    • Target

      5299562a1400d9de465f3253a8b6e84b

    • Size

      33KB

    • MD5

      5299562a1400d9de465f3253a8b6e84b

    • SHA1

      222c7f74e05f153a32638268f6dcd36c9cc676ea

    • SHA256

      99292ea955b5f3af6268117b236f6e64ef9d10b082d382d95e79e1bb75e7e260

    • SHA512

      d87373ce2c832e9c1dc2fa52e178d0d48ad82faf4859a599589f092b2879a949f2b05759283e325f01d95061c8f66a008178ed4393cddade26c2ce59e99b068d

    • SSDEEP

      384:fjeLOnMIwQZOG0tsCQCd89cPDDCm7wLHUQzp3C05NJ8RekSTOn1nzHRiFb1Y1PnN:fH7R0am7q/555NJ9kSTOnVaK6400

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks