Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    e763d73e87d52bbe02815ee9c8111798_JaffaCakes118

  • Size

    471KB

  • Sample

    241212-vkdqnsspaq

  • MD5

    e763d73e87d52bbe02815ee9c8111798

  • SHA1

    3d68044924a671a276a0bd57cf9ef1e7b5b43fe6

  • SHA256

    dbdd5e9e5e80787d57555fad01b136b27ddb17d3fe99a8ed401ae7dbb8180c53

  • SHA512

    c2786ac108602f31b4f2505b8eb9920affadd379a47df8587a8a8c4c0d22f7714cd9c907d9166109a7dfa4abeafdadf6f89b5767baecad2a8e1187e3ed8298b6

  • SSDEEP

    6144:Hc0MYVrqlZ7/XjkNze4Rkk6/M97zLlzhu5RuyvP0BqsotP7wLoVdt2Ds3ZNr5t:HrDVrarINaM6/wObuyH6Y68t+MZN9

Malware Config

Targets

    • Target

      e763d73e87d52bbe02815ee9c8111798_JaffaCakes118

    • Size

      471KB

    • MD5

      e763d73e87d52bbe02815ee9c8111798

    • SHA1

      3d68044924a671a276a0bd57cf9ef1e7b5b43fe6

    • SHA256

      dbdd5e9e5e80787d57555fad01b136b27ddb17d3fe99a8ed401ae7dbb8180c53

    • SHA512

      c2786ac108602f31b4f2505b8eb9920affadd379a47df8587a8a8c4c0d22f7714cd9c907d9166109a7dfa4abeafdadf6f89b5767baecad2a8e1187e3ed8298b6

    • SSDEEP

      6144:Hc0MYVrqlZ7/XjkNze4Rkk6/M97zLlzhu5RuyvP0BqsotP7wLoVdt2Ds3ZNr5t:HrDVrarINaM6/wObuyH6Y68t+MZN9

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks