Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
131s -
max time network
146s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system -
submitted
09/01/2023, 12:51
Static task
static1
Behavioral task
behavioral1
Sample
Invoice and Packing/InvoiceandPacking09876545678909876545678987 .exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
Invoice and Packing/InvoiceandPacking09876545678909876545678987 .exe
Resource
win10v2004-20220812-en
General
-
Target
Invoice and Packing/InvoiceandPacking09876545678909876545678987 .exe
-
Size
733KB
-
MD5
c926b1d5c1e941381c4809c5776b6ba9
-
SHA1
a115c861e62481b6822d292ef589c7786a970055
-
SHA256
b72a8753d475c079cec084dc32cf8addec72b670d4cd094f67900d73781cace1
-
SHA512
94b32e64fd8be657d315bea8c13fdf01108557c9143d5d80b8a328175aec8352dd276829c2971627b4ca441b6149eb309d71fb4b9fafccd81b9a234b61cce678
-
SSDEEP
12288:n437Oofhfv77Kz6Vk1z3TDeo9aqIwF4x84azsAyNBt:nqLhvKJXeo9fH0MzOt
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage 1 IoCs
resource yara_rule behavioral1/memory/1220-55-0x0000000000290000-0x00000000002BC000-memory.dmp modiloader_stage2