Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

29a157fe9d...cd.exe

windows7-x64

10

29a157fe9d...cd.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    29a157fe9d33e9520dd77b8e0dfe6dcd

  • Size

    499KB

  • Sample

    231231-fyb2nsbfer

  • MD5

    29a157fe9d33e9520dd77b8e0dfe6dcd

  • SHA1

    0378da0ae8305b9b54999f3b9e42352ecb464df6

  • SHA256

    715bfe03c147757c14e668fa318ef48287fa96ff8eb888431a84500f062ca789

  • SHA512

    15f24b270c25022e11ea3b6fdce7b6b6af2f2185d173c49a1bf2a9479801fe326c7df49dbff49d9fce737a43627d3cd9bd22e68851eb1315ec43d898c6aa53f4

  • SSDEEP

    12288:RQcRdz8fLCUuoTeAa5tF3Z4mxxnzRwd/2eK+TggG:hdEL6oTe5QmXnz+M5ht

Score
10/10
modiloaderpersistencetrojan

Malware Config

Targets

    • Target

      29a157fe9d33e9520dd77b8e0dfe6dcd

    • Size

      499KB

    • MD5

      29a157fe9d33e9520dd77b8e0dfe6dcd

    • SHA1

      0378da0ae8305b9b54999f3b9e42352ecb464df6

    • SHA256

      715bfe03c147757c14e668fa318ef48287fa96ff8eb888431a84500f062ca789

    • SHA512

      15f24b270c25022e11ea3b6fdce7b6b6af2f2185d173c49a1bf2a9479801fe326c7df49dbff49d9fce737a43627d3cd9bd22e68851eb1315ec43d898c6aa53f4

    • SSDEEP

      12288:RQcRdz8fLCUuoTeAa5tF3Z4mxxnzRwd/2eK+TggG:hdEL6oTe5QmXnz+M5ht

    Score
    10/10
    modiloaderpersistencetrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Sets DLL path for service in the registry

      persistence

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks