Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
29a157fe9d33e9520dd77b8e0dfe6dcd
-
Size
499KB
-
Sample
231231-fyb2nsbfer
-
MD5
29a157fe9d33e9520dd77b8e0dfe6dcd
-
SHA1
0378da0ae8305b9b54999f3b9e42352ecb464df6
-
SHA256
715bfe03c147757c14e668fa318ef48287fa96ff8eb888431a84500f062ca789
-
SHA512
15f24b270c25022e11ea3b6fdce7b6b6af2f2185d173c49a1bf2a9479801fe326c7df49dbff49d9fce737a43627d3cd9bd22e68851eb1315ec43d898c6aa53f4
-
SSDEEP
12288:RQcRdz8fLCUuoTeAa5tF3Z4mxxnzRwd/2eK+TggG:hdEL6oTe5QmXnz+M5ht
Static task
static1
Behavioral task
behavioral1
Sample
29a157fe9d33e9520dd77b8e0dfe6dcd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
29a157fe9d33e9520dd77b8e0dfe6dcd.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
29a157fe9d33e9520dd77b8e0dfe6dcd
-
Size
499KB
-
MD5
29a157fe9d33e9520dd77b8e0dfe6dcd
-
SHA1
0378da0ae8305b9b54999f3b9e42352ecb464df6
-
SHA256
715bfe03c147757c14e668fa318ef48287fa96ff8eb888431a84500f062ca789
-
SHA512
15f24b270c25022e11ea3b6fdce7b6b6af2f2185d173c49a1bf2a9479801fe326c7df49dbff49d9fce737a43627d3cd9bd22e68851eb1315ec43d898c6aa53f4
-
SSDEEP
12288:RQcRdz8fLCUuoTeAa5tF3Z4mxxnzRwd/2eK+TggG:hdEL6oTe5QmXnz+M5ht
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Sets DLL path for service in the registry
-
Loads dropped DLL
-
Drops file in System32 directory
-