Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
146s -
max time network
153s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
19/09/2022, 08:43
Static task
static1
Behavioral task
behavioral1
Sample
In allegato il nuovo elenco ordini.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
In allegato il nuovo elenco ordini.exe
Resource
win10v2004-20220901-en
General
-
Target
In allegato il nuovo elenco ordini.exe
-
Size
967KB
-
MD5
af23007b78a02d5d5ad429880a505c9c
-
SHA1
fe82317e4682b0d23b457f26c2a3f6493e37a530
-
SHA256
1fc078aab853bc4972b2e74e1f04879cd246668bdf120d210fd51a029c021c1c
-
SHA512
849bdfc8e433cf07d75555895dc9eb6f766dc21f15e8d784a04e976723d05b8bb041e833553feb2e1f869ef9018dc489eb8e7e9d9d3d1929bea65d903c3db1a7
-
SSDEEP
12288:8HbINWvoTEQYJGl/iUfkcogKuqAJA+1z48qDo5ynuzFl2LUv0eMqnexYA1l/X:6b6ZeGBiAkcogKOi+1zSo5ynRxYA7/X
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage 63 IoCs
resource yara_rule behavioral1/memory/364-55-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-56-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-57-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-58-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-59-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-60-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-61-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-62-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-63-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-64-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-65-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-66-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-67-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-68-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-69-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-70-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-71-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-72-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-73-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-74-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-75-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-76-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-77-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-78-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-79-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-80-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-81-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-82-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-83-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-84-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-85-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-86-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-87-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-88-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-89-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-90-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-93-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-94-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-92-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-91-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-95-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-96-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-97-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-98-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-99-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-100-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-101-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-102-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-103-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-104-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-105-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-106-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-107-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-108-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-109-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-110-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-111-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-112-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-113-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-114-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-115-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-116-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2 behavioral1/memory/364-117-0x0000000000570000-0x00000000005D1000-memory.dmp modiloader_stage2