Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
136s -
max time network
112s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
11/08/2024, 15:07
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
MisterModzZ Injector.exe
Resource
win7-20240704-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
MisterModzZ Injector.exe
Resource
win10v2004-20240802-en
4 signatures
150 seconds
General
-
Target
MisterModzZ Injector.exe
-
Size
7.8MB
-
MD5
db7119148df42a9390aac720759fe730
-
SHA1
b2908f79ea33cb385418a27d0094685ab03dc55c
-
SHA256
ba2fbbbc7f55f10aa45c4ffa78b016f234f819f27d4bfcc273066ec588c97521
-
SHA512
3730fdc0650c0e9a8b41676c6fa2d2d65cdde777da1c4e88e45403ae69394b112b7d56f9ecd8d17872834cda657d9266f3e140b17ea1523da9a6c02f7f9796c2
-
SSDEEP
49152:KNA9Ib1Og5i531oKFxerC7g4CBJe0kFW/KhCT:MMqh5i5loqC4gJ/UXo
Score
7/10
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-656926755-4116854191-210765258-1000\Control Panel\International\Geo\Nation MisterModzZ Injector.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4192 MisterModzZ Injector.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4192 MisterModzZ Injector.exe -
Suspicious use of SendNotifyMessage 1 IoCs
pid Process 4192 MisterModzZ Injector.exe