Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
11/12/2024, 05:48
General
-
Target
E-mail_Marketing.exe
-
Size
5.5MB
-
MD5
d628023e84a18532f41c2ccc821cdece
-
SHA1
e0d63957471e7c88569c0f6b14e7a719d08589e2
-
SHA256
a119de51864d5788c7ee7fea38b64b46132c0c8623501bd1ab0d39672f607feb
-
SHA512
49548516126da90c89295636c92ddcc5de39a7fa06a504256525e890b7db939c59ff2dab9420ee47754dd0f9434dace6a967ff4d21201b98d66c54ce9d31f51f
-
SSDEEP
49152:uXKnakcrWjOqGX0qbiK56K6ruykr2UzNfgH701zohuWTLIDirKXyDEgGuQC42mLu:CmatXFiNrM2u3mhTLIDir93QC42m
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modiloader family
-
ModiLoader First Stage 15 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\E-mail_Marketing.exe"C:\Users\Admin\AppData\Local\Temp\E-mail_Marketing.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5.5MB
-
Filesize
4KB
-
Filesize
124KB
-
Filesize
4KB
-
Filesize
124KB
-
Filesize
5.5MB
-
Filesize
5.5MB
-
Filesize
5.5MB
-
Filesize
124KB
-
Filesize
5.5MB
-
Filesize
5.5MB
-
Filesize
5.5MB
-
Filesize
5.5MB
-
Filesize
5.5MB
-
Filesize
5.5MB
-
Filesize
5.5MB
-
Filesize
5.5MB
-
Filesize
5.5MB
-
Filesize
5.5MB
-
Filesize
124KB
-
Filesize
5.5MB