Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    8e181beb277e9c40d3028f2c8efaf55f

  • Size

    436KB

  • Sample

    240204-dy1c6aaedp

  • MD5

    8e181beb277e9c40d3028f2c8efaf55f

  • SHA1

    a5b27d262a2fb59d941cb1a6ca6c6fbf15210a83

  • SHA256

    cb67844c1988b0738263573ebf7a2a2bf477ecfb9c2a51f3c65d586d17be9d18

  • SHA512

    768a6e39dbe49b1f537680f8aa241fc4b434dbcdf5569b4df8eef4ac5a02ec95caaf66e52d2abebcd0472bb515c22e450a92d1999990d2c0ad1991165889b50d

  • SSDEEP

    6144:N1GWAE41wXoMpK8tFCQqztvtrEKlYuhRdUnTWEpFVoo2Uq1JXEKqRg6z/mGxUhIF:NYEj5tFi5Fr9lYI8LjUH5S1xUyH

Malware Config

Targets

    • Target

      8e181beb277e9c40d3028f2c8efaf55f

    • Size

      436KB

    • MD5

      8e181beb277e9c40d3028f2c8efaf55f

    • SHA1

      a5b27d262a2fb59d941cb1a6ca6c6fbf15210a83

    • SHA256

      cb67844c1988b0738263573ebf7a2a2bf477ecfb9c2a51f3c65d586d17be9d18

    • SHA512

      768a6e39dbe49b1f537680f8aa241fc4b434dbcdf5569b4df8eef4ac5a02ec95caaf66e52d2abebcd0472bb515c22e450a92d1999990d2c0ad1991165889b50d

    • SSDEEP

      6144:N1GWAE41wXoMpK8tFCQqztvtrEKlYuhRdUnTWEpFVoo2Uq1JXEKqRg6z/mGxUhIF:NYEj5tFi5Fr9lYI8LjUH5S1xUyH

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks