Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    3833d145deb51045263eecc433f72fb8_JaffaCakes118

  • Size

    95KB

  • Sample

    240711-h75rfsxhpe

  • MD5

    3833d145deb51045263eecc433f72fb8

  • SHA1

    ab916eff5ec4f679e0130b5e1c8d5b8dc833b428

  • SHA256

    4320c709971fee0240c0474182b1606ad6b71dff7fe1796be34521b79c6d917f

  • SHA512

    d89a971b1dde908b9aecfec931021887ad81d62996b5ca78340829666583bc303fb419a10805241608955824ef99a828a7a883d6311989be0733d9fca79e66f8

  • SSDEEP

    1536:B71Je9+W+eXjNBDm9NAsPsFdOUC6TtgegbhcTXSbJakuwP2joHDLXaHQmPg:B7/LW55xmnEFdOkty96CN1OsHDMP

Malware Config

Targets

    • Target

      3833d145deb51045263eecc433f72fb8_JaffaCakes118

    • Size

      95KB

    • MD5

      3833d145deb51045263eecc433f72fb8

    • SHA1

      ab916eff5ec4f679e0130b5e1c8d5b8dc833b428

    • SHA256

      4320c709971fee0240c0474182b1606ad6b71dff7fe1796be34521b79c6d917f

    • SHA512

      d89a971b1dde908b9aecfec931021887ad81d62996b5ca78340829666583bc303fb419a10805241608955824ef99a828a7a883d6311989be0733d9fca79e66f8

    • SSDEEP

      1536:B71Je9+W+eXjNBDm9NAsPsFdOUC6TtgegbhcTXSbJakuwP2joHDLXaHQmPg:B7/LW55xmnEFdOkty96CN1OsHDMP

    Score
    10/10
    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks