Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    13/09/2022, 23:46

General

  • Target

    order confirmation reference no. FXEPS6S08102.exe

  • Size

    891KB

  • MD5

    19877c0de0c846072076447d6e4b539c

  • SHA1

    ed8dbcd877b29427a0e65afca87a961b913b2427

  • SHA256

    7ff888a459a2476f9e3dfcaf8799f30bc24808d103606512503949b3ab818cc4

  • SHA512

    af2e143f89786bc3bfef86168fc682db667fe7517922e6f3b02d900db929be3e49d212d970be9b393597648e24db0310222a7f8285c995570857b8404ed7ebcb

  • SSDEEP

    12288:ZOoNkC1LR7d1g1Iasz4l4yDoCHjsG83q/rhf7fvQBu5F:ZbpRh1i+4ToT3q/lvku/

Score
10/10

Malware Config

Signatures

  • ModiLoader, DBatLoader

    ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

  • ModiLoader Second Stage 62 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\order confirmation reference no. FXEPS6S08102.exe
    "C:\Users\Admin\AppData\Local\Temp\order confirmation reference no. FXEPS6S08102.exe"
    1⤵
      PID:1960

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1960-54-0x0000000075451000-0x0000000075453000-memory.dmp

      Filesize

      8KB

    • memory/1960-56-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-97-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-96-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-95-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-94-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-93-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-92-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-91-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-90-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-89-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-88-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-87-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-86-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-85-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-84-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-83-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-82-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-81-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-80-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-79-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-78-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-77-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-76-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-75-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-74-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-73-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-72-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-71-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-70-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-69-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-68-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-67-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-66-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-65-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-64-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-63-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-62-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-61-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-60-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-59-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-58-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-98-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-101-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-100-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-99-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-102-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-106-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-105-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-104-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-103-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-108-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-107-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-109-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-118-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-117-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-116-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-115-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-114-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-113-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-112-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-111-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB

    • memory/1960-110-0x0000000000660000-0x00000000006C4000-memory.dmp

      Filesize

      400KB