Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
bf328fc6d56a2654a72462cf1cb8d272938e00e1c63080ad1f5bd4955fbda1ca
-
Size
1014KB
-
Sample
221206-r18zzaah5s
-
MD5
c831cd269e497ab0f66a7072cc186dc2
-
SHA1
3030267bbbdaea146c6210a9f377d971886c7cb2
-
SHA256
bf328fc6d56a2654a72462cf1cb8d272938e00e1c63080ad1f5bd4955fbda1ca
-
SHA512
a47e5a4f9ec2223312c5b88c3edd247561f217e332a573205b4070e55b030392834563f52012f93095b45e19991f5e3f2cb4df00c0051ffecd7325a74e71bd0b
-
SSDEEP
24576:8qFCyh0JN6+PebNO4b+bO9XOXAz01dyZVoEbAfLbkLvF/pX/9o:P0AqYbbs4b+gOXAwTyZZbADALppX/9o
Behavioral task
behavioral1
Sample
bf328fc6d56a2654a72462cf1cb8d272938e00e1c63080ad1f5bd4955fbda1ca.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bf328fc6d56a2654a72462cf1cb8d272938e00e1c63080ad1f5bd4955fbda1ca.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
bf328fc6d56a2654a72462cf1cb8d272938e00e1c63080ad1f5bd4955fbda1ca
-
Size
1014KB
-
MD5
c831cd269e497ab0f66a7072cc186dc2
-
SHA1
3030267bbbdaea146c6210a9f377d971886c7cb2
-
SHA256
bf328fc6d56a2654a72462cf1cb8d272938e00e1c63080ad1f5bd4955fbda1ca
-
SHA512
a47e5a4f9ec2223312c5b88c3edd247561f217e332a573205b4070e55b030392834563f52012f93095b45e19991f5e3f2cb4df00c0051ffecd7325a74e71bd0b
-
SSDEEP
24576:8qFCyh0JN6+PebNO4b+bO9XOXAz01dyZVoEbAfLbkLvF/pX/9o:P0AqYbbs4b+gOXAwTyZZbADALppX/9o
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Suspicious use of SetThreadContext
-