Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

d5f7dcba1f...18.exe

windows7-x64

10

d5f7dcba1f...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d5f7dcba1f4b7b7659742305e4fcc41f_JaffaCakes118

  • Size

    590KB

  • Sample

    240909-kkdessscmd

  • MD5

    d5f7dcba1f4b7b7659742305e4fcc41f

  • SHA1

    4dac1f030d66273ee13934a5f9ec0ba1951847a2

  • SHA256

    2ef7d74625d62840d77464481e128e0b2f835043852e08413716b7dbb5b1135a

  • SHA512

    ce62e51fb7ae2cdd0f203dc0c3616814e7af298e6aa72584470f276081a2b626936872f2c5fdd28f5605fd9560614617f0c28e160f8d21db34418287e376d7d6

  • SSDEEP

    12288:owDDh8iktuS3BuLr5+OWJSR4FktF3Z4mxx6hsV4AOwf7DGj7XQs:ow/6juSxuPUSKutQmXYYtfujJ

Score
10/10
modiloaderdiscoverypersistencetrojan

Malware Config

Targets

    • Target

      d5f7dcba1f4b7b7659742305e4fcc41f_JaffaCakes118

    • Size

      590KB

    • MD5

      d5f7dcba1f4b7b7659742305e4fcc41f

    • SHA1

      4dac1f030d66273ee13934a5f9ec0ba1951847a2

    • SHA256

      2ef7d74625d62840d77464481e128e0b2f835043852e08413716b7dbb5b1135a

    • SHA512

      ce62e51fb7ae2cdd0f203dc0c3616814e7af298e6aa72584470f276081a2b626936872f2c5fdd28f5605fd9560614617f0c28e160f8d21db34418287e376d7d6

    • SSDEEP

      12288:owDDh8iktuS3BuLr5+OWJSR4FktF3Z4mxx6hsV4AOwf7DGj7XQs:ow/6juSxuPUSKutQmXYYtfujJ

    Score
    10/10
    modiloaderdiscoverypersistencetrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks