Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
133s -
max time network
149s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
13/09/2022, 23:46
Static task
static1
Behavioral task
behavioral1
Sample
order confirmation reference no. FXEPS6S08102.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
order confirmation reference no. FXEPS6S08102.exe
Resource
win10v2004-20220812-en
General
-
Target
order confirmation reference no. FXEPS6S08102.exe
-
Size
891KB
-
MD5
19877c0de0c846072076447d6e4b539c
-
SHA1
ed8dbcd877b29427a0e65afca87a961b913b2427
-
SHA256
7ff888a459a2476f9e3dfcaf8799f30bc24808d103606512503949b3ab818cc4
-
SHA512
af2e143f89786bc3bfef86168fc682db667fe7517922e6f3b02d900db929be3e49d212d970be9b393597648e24db0310222a7f8285c995570857b8404ed7ebcb
-
SSDEEP
12288:ZOoNkC1LR7d1g1Iasz4l4yDoCHjsG83q/rhf7fvQBu5F:ZbpRh1i+4ToT3q/lvku/
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage 62 IoCs
resource yara_rule behavioral1/memory/1960-56-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-97-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-96-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-95-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-94-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-93-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-92-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-91-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-90-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-89-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-88-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-87-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-86-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-85-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-84-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-83-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-82-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-81-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-80-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-79-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-78-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-77-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-76-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-75-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-74-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-73-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-72-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-71-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-70-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-69-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-68-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-67-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-66-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-65-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-64-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-63-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-62-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-61-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-60-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-59-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-58-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-98-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-101-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-100-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-99-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-102-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-106-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-105-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-104-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-103-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-108-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-107-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-109-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-118-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-117-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-116-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-115-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-114-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-113-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-112-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-111-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2 behavioral1/memory/1960-110-0x0000000000660000-0x00000000006C4000-memory.dmp modiloader_stage2