Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2d889cc99d...18.exe

windows7-x64

10

2d889cc99d...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2d889cc99d992cb6cb478b76f9dbecea_JaffaCakes118

  • Size

    31KB

  • Sample

    240708-x359ravcnr

  • MD5

    2d889cc99d992cb6cb478b76f9dbecea

  • SHA1

    0aba963b4b23e523fd036d5d3e6edfb7f1786cbc

  • SHA256

    5103bbe8915dfb5d5b58067c3112582b7c8eb710e0dcfd720a79a99370b23df9

  • SHA512

    b21e21a976684e55bc68a65366957f78788b6d1b8d79d8a0e9d2d9e6710962953fd4c62995e9ba7e3eed5ea8fc7202c83558e49edaf262c36bfc871f719eb233

  • SSDEEP

    768:zfoixqZOlQQ/a30oDNg0jMmVoas78Kuyfv:zfvxqZ4QQSE3gV9Suy

Score
10/10
modiloaderpersistencetrojan

Malware Config

Targets

    • Target

      2d889cc99d992cb6cb478b76f9dbecea_JaffaCakes118

    • Size

      31KB

    • MD5

      2d889cc99d992cb6cb478b76f9dbecea

    • SHA1

      0aba963b4b23e523fd036d5d3e6edfb7f1786cbc

    • SHA256

      5103bbe8915dfb5d5b58067c3112582b7c8eb710e0dcfd720a79a99370b23df9

    • SHA512

      b21e21a976684e55bc68a65366957f78788b6d1b8d79d8a0e9d2d9e6710962953fd4c62995e9ba7e3eed5ea8fc7202c83558e49edaf262c36bfc871f719eb233

    • SSDEEP

      768:zfoixqZOlQQ/a30oDNg0jMmVoas78Kuyfv:zfvxqZ4QQSE3gV9Suy

    Score
    10/10
    modiloaderpersistencetrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • Modifies WinLogon for persistence

      persistence

    • ModiLoader Second Stage

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks