Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
Invoice and Packing.gz
-
Size
336KB
-
Sample
230109-p3gmdshf6s
-
MD5
177eaa709271367e113b1ac8fb9385b5
-
SHA1
279d12a54f54be87719fab5a9ce0776b5cf74783
-
SHA256
cd79d734bb0687a497d46e32d4880c00581a5b64c2e9e5e89cb09c135fbc55fa
-
SHA512
ea02ec947dc19a8bb08731f0f1a1efca81ea8f3a4ae0773a444b12c0da7a2f7f7b2b6106c236ec67114ff42783285b549ad14b6fa3cba615ad2d22d71e7a2cce
-
SSDEEP
6144:UkrqN5T9gg08Xu6WNWyJib4r6seKFIZMk6X1z2esggUTMaEtyV0c1:u5GGWxM46seQJ23UTbXP1
Static task
static1
Behavioral task
behavioral1
Sample
Invoice and Packing/InvoiceandPacking09876545678909876545678987 .exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
Invoice and Packing/InvoiceandPacking09876545678909876545678987 .exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
Invoice and Packing/InvoiceandPacking09876545678909876545678987 .exe
-
Size
733KB
-
MD5
c926b1d5c1e941381c4809c5776b6ba9
-
SHA1
a115c861e62481b6822d292ef589c7786a970055
-
SHA256
b72a8753d475c079cec084dc32cf8addec72b670d4cd094f67900d73781cace1
-
SHA512
94b32e64fd8be657d315bea8c13fdf01108557c9143d5d80b8a328175aec8352dd276829c2971627b4ca441b6149eb309d71fb4b9fafccd81b9a234b61cce678
-
SSDEEP
12288:n437Oofhfv77Kz6Vk1z3TDeo9aqIwF4x84azsAyNBt:nqLhvKJXeo9fH0MzOt
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-