Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    1f1d348153db601b03af017745a5a0a1

  • Size

    290KB

  • Sample

    231230-2v8gcsfhdq

  • MD5

    1f1d348153db601b03af017745a5a0a1

  • SHA1

    dc80dfd810ff88b3acb011f6cb4b7a269441beb5

  • SHA256

    d118deba30379041074abca2dca83f00e02940ef1309a6a8153c9e68c4cf40ef

  • SHA512

    690b610245bfd0d5415c670b0813c04ea819054e52711a1beba440f7cb600c763f717e745920406e4fa784e3562f7411d1661a4cf04995623eb82fc487fd6dc5

  • SSDEEP

    6144:n0J+kIyh66vNZoHhzWES2GBTrn2BNs/FjSocEC5qbcHyhQcrEzRLa:0JBIeNIWQG5n2BNAj2Z5qbuSQcA1a

Score
10/10

Malware Config

Targets

    • Target

      1f1d348153db601b03af017745a5a0a1

    • Size

      290KB

    • MD5

      1f1d348153db601b03af017745a5a0a1

    • SHA1

      dc80dfd810ff88b3acb011f6cb4b7a269441beb5

    • SHA256

      d118deba30379041074abca2dca83f00e02940ef1309a6a8153c9e68c4cf40ef

    • SHA512

      690b610245bfd0d5415c670b0813c04ea819054e52711a1beba440f7cb600c763f717e745920406e4fa784e3562f7411d1661a4cf04995623eb82fc487fd6dc5

    • SSDEEP

      6144:n0J+kIyh66vNZoHhzWES2GBTrn2BNs/FjSocEC5qbcHyhQcrEzRLa:0JBIeNIWQG5n2BNAj2Z5qbuSQcA1a

    Score
    10/10
    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks