Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

5299562a14...4b.exe

windows7-x64

10

5299562a14...4b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5299562a1400d9de465f3253a8b6e84b

  • Size

    33KB

  • Sample

    231226-ely51acdc5

  • MD5

    5299562a1400d9de465f3253a8b6e84b

  • SHA1

    222c7f74e05f153a32638268f6dcd36c9cc676ea

  • SHA256

    99292ea955b5f3af6268117b236f6e64ef9d10b082d382d95e79e1bb75e7e260

  • SHA512

    d87373ce2c832e9c1dc2fa52e178d0d48ad82faf4859a599589f092b2879a949f2b05759283e325f01d95061c8f66a008178ed4393cddade26c2ce59e99b068d

  • SSDEEP

    384:fjeLOnMIwQZOG0tsCQCd89cPDDCm7wLHUQzp3C05NJ8RekSTOn1nzHRiFb1Y1PnN:fH7R0am7q/555NJ9kSTOnVaK6400

Score
10/10
modiloaderpersistencetrojan

Malware Config

Targets

    • Target

      5299562a1400d9de465f3253a8b6e84b

    • Size

      33KB

    • MD5

      5299562a1400d9de465f3253a8b6e84b

    • SHA1

      222c7f74e05f153a32638268f6dcd36c9cc676ea

    • SHA256

      99292ea955b5f3af6268117b236f6e64ef9d10b082d382d95e79e1bb75e7e260

    • SHA512

      d87373ce2c832e9c1dc2fa52e178d0d48ad82faf4859a599589f092b2879a949f2b05759283e325f01d95061c8f66a008178ed4393cddade26c2ce59e99b068d

    • SSDEEP

      384:fjeLOnMIwQZOG0tsCQCd89cPDDCm7wLHUQzp3C05NJ8RekSTOn1nzHRiFb1Y1PnN:fH7R0am7q/555NJ9kSTOnVaK6400

    Score
    10/10
    modiloaderpersistencetrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks