Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
131s -
max time network
146s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
12/01/2023, 07:51
Static task
static1
Behavioral task
behavioral1
Sample
Document Required310753577644567865689.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Document Required310753577644567865689.exe
Resource
win10v2004-20221111-en
General
-
Target
Document Required310753577644567865689.exe
-
Size
1.1MB
-
MD5
0f1caf9593d310fdb217cb05e62693f9
-
SHA1
cd3a58a665444ac047aef10e5deefbba65b54e18
-
SHA256
b7285db14a569eccf6e5cca5416478153c38b9b7931f0bdea403901c3632cbc9
-
SHA512
985ed0ce05a4ed4eb37630238974f3d487fbe404809229db488ea722a6af115256fe786020ee6bcc6d113186db10fabb22b6b5f4f32f93131db2de2e3807a7f0
-
SSDEEP
24576:ygaIphuOCwQSQ8eD0jzOt1ytFvDgIFoc5:y2B2DCzOt1ytFvDpFoc
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage 1 IoCs
resource yara_rule behavioral1/memory/1480-55-0x0000000000390000-0x00000000003BC000-memory.dmp modiloader_stage2