Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

37eadae0fe...18.exe

windows7-x64

10

37eadae0fe...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    37eadae0fe1b3bffde8e0e7911412b76_JaffaCakes118

  • Size

    214KB

  • Sample

    240711-gfpqgs1hrj

  • MD5

    37eadae0fe1b3bffde8e0e7911412b76

  • SHA1

    203484c1b6d75dc8609c7277f09945b9fb0616bc

  • SHA256

    3babee58c2f029027550133650038a24251e9b952801941dd98428c0460cd2d1

  • SHA512

    09c245d7bdb60db80a995ec8c222dbaf62d1c3b91d48f46934bf35d379e24b70113a41218ee228133baf24fccf4448330fa666d69ed81adc1a698f5b21143d98

  • SSDEEP

    3072:jGu9BlfzWIbXWm+w0Jj5o870Oa7w3YQOnjDIuDiiFsmSAkErh9osAUj8eAbhRQcY:j/0uoqFvFjkvmS1Erk3XeAbhR9J8ZRb

Score
10/10
modiloaderpersistencetrojan

Malware Config

Targets

    • Target

      37eadae0fe1b3bffde8e0e7911412b76_JaffaCakes118

    • Size

      214KB

    • MD5

      37eadae0fe1b3bffde8e0e7911412b76

    • SHA1

      203484c1b6d75dc8609c7277f09945b9fb0616bc

    • SHA256

      3babee58c2f029027550133650038a24251e9b952801941dd98428c0460cd2d1

    • SHA512

      09c245d7bdb60db80a995ec8c222dbaf62d1c3b91d48f46934bf35d379e24b70113a41218ee228133baf24fccf4448330fa666d69ed81adc1a698f5b21143d98

    • SSDEEP

      3072:jGu9BlfzWIbXWm+w0Jj5o870Oa7w3YQOnjDIuDiiFsmSAkErh9osAUj8eAbhRQcY:j/0uoqFvFjkvmS1Erk3XeAbhR9J8ZRb

    Score
    10/10
    modiloaderpersistencetrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks