Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

f8bad16394...18.exe

windows7-x64

10

f8bad16394...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f8bad16394df3cb9d52ffe595f21fef3_JaffaCakes118

  • Size

    646KB

  • Sample

    240926-tkcb6sygmg

  • MD5

    f8bad16394df3cb9d52ffe595f21fef3

  • SHA1

    23d90ea86247f17ba789aef9772b58b18e3ad15f

  • SHA256

    cfaca0bb9c7594454566ca937b3ff7184fe5bf54c1af22fb85264d8d0d7d2ecb

  • SHA512

    26eb3e015f5bd28ea8ce2dc91e9800e5f175f75d15ec675f9afef78701201a94e07e8bafa3036818ef4ea086c015e854d52f80d267f9c6b88188394fd4287303

  • SSDEEP

    12288:iacMEMKFEe1e7kiRyF73vuiEv8xU63NMmi4zmzCE1c2obY7UPR:iajEMw71nrFbmDUxr/lmCmocSR

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      f8bad16394df3cb9d52ffe595f21fef3_JaffaCakes118

    • Size

      646KB

    • MD5

      f8bad16394df3cb9d52ffe595f21fef3

    • SHA1

      23d90ea86247f17ba789aef9772b58b18e3ad15f

    • SHA256

      cfaca0bb9c7594454566ca937b3ff7184fe5bf54c1af22fb85264d8d0d7d2ecb

    • SHA512

      26eb3e015f5bd28ea8ce2dc91e9800e5f175f75d15ec675f9afef78701201a94e07e8bafa3036818ef4ea086c015e854d52f80d267f9c6b88188394fd4287303

    • SSDEEP

      12288:iacMEMKFEe1e7kiRyF73vuiEv8xU63NMmi4zmzCE1c2obY7UPR:iajEMw71nrFbmDUxr/lmCmocSR

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks