Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
81e62dc1394948ce2797541c0dbf2fcb5aafb4fa2e0ad3043d8359e3003e5584
-
Size
225KB
-
Sample
221203-gnhl5sdh7y
-
MD5
cc46aaac8b06b2240a003b24e826ab4e
-
SHA1
48bec3433ad1bc37dd58364f2f095676b6e09beb
-
SHA256
81e62dc1394948ce2797541c0dbf2fcb5aafb4fa2e0ad3043d8359e3003e5584
-
SHA512
50998b82982fb21e293455e277c576b20544c8e850c031da5e4e1fb2af357cc9a461c7ede93bcd73901f2e64b7bc3c486de770167384382a2db8a48adf23520f
-
SSDEEP
3072:qeFngxw7+9d619Qjpsx1uoDM4vpwvvHXvMYS527E5j8VV/36J/h:/Vs1stg4GHXvMYc2TV/qJp
Static task
static1
Behavioral task
behavioral1
Sample
81e62dc1394948ce2797541c0dbf2fcb5aafb4fa2e0ad3043d8359e3003e5584.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
81e62dc1394948ce2797541c0dbf2fcb5aafb4fa2e0ad3043d8359e3003e5584.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
81e62dc1394948ce2797541c0dbf2fcb5aafb4fa2e0ad3043d8359e3003e5584
-
Size
225KB
-
MD5
cc46aaac8b06b2240a003b24e826ab4e
-
SHA1
48bec3433ad1bc37dd58364f2f095676b6e09beb
-
SHA256
81e62dc1394948ce2797541c0dbf2fcb5aafb4fa2e0ad3043d8359e3003e5584
-
SHA512
50998b82982fb21e293455e277c576b20544c8e850c031da5e4e1fb2af357cc9a461c7ede93bcd73901f2e64b7bc3c486de770167384382a2db8a48adf23520f
-
SSDEEP
3072:qeFngxw7+9d619Qjpsx1uoDM4vpwvvHXvMYS527E5j8VV/36J/h:/Vs1stg4GHXvMYc2TV/qJp
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Modifies Installed Components in the registry
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-