Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

8e181beb27...5f.exe

windows7-x64

10

8e181beb27...5f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8e181beb277e9c40d3028f2c8efaf55f

  • Size

    436KB

  • Sample

    240204-dy1c6aaedp

  • MD5

    8e181beb277e9c40d3028f2c8efaf55f

  • SHA1

    a5b27d262a2fb59d941cb1a6ca6c6fbf15210a83

  • SHA256

    cb67844c1988b0738263573ebf7a2a2bf477ecfb9c2a51f3c65d586d17be9d18

  • SHA512

    768a6e39dbe49b1f537680f8aa241fc4b434dbcdf5569b4df8eef4ac5a02ec95caaf66e52d2abebcd0472bb515c22e450a92d1999990d2c0ad1991165889b50d

  • SSDEEP

    6144:N1GWAE41wXoMpK8tFCQqztvtrEKlYuhRdUnTWEpFVoo2Uq1JXEKqRg6z/mGxUhIF:NYEj5tFi5Fr9lYI8LjUH5S1xUyH

Score
10/10
modiloaderpersistencetrojan

Malware Config

Targets

    • Target

      8e181beb277e9c40d3028f2c8efaf55f

    • Size

      436KB

    • MD5

      8e181beb277e9c40d3028f2c8efaf55f

    • SHA1

      a5b27d262a2fb59d941cb1a6ca6c6fbf15210a83

    • SHA256

      cb67844c1988b0738263573ebf7a2a2bf477ecfb9c2a51f3c65d586d17be9d18

    • SHA512

      768a6e39dbe49b1f537680f8aa241fc4b434dbcdf5569b4df8eef4ac5a02ec95caaf66e52d2abebcd0472bb515c22e450a92d1999990d2c0ad1991165889b50d

    • SSDEEP

      6144:N1GWAE41wXoMpK8tFCQqztvtrEKlYuhRdUnTWEpFVoo2Uq1JXEKqRg6z/mGxUhIF:NYEj5tFi5Fr9lYI8LjUH5S1xUyH

    Score
    10/10
    modiloaderpersistencetrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks