Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
92s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
18/01/2024, 19:51
General
-
Target
65e3c643bf0a434ca0c88c032afccd3d.exe
-
Size
1.8MB
-
MD5
65e3c643bf0a434ca0c88c032afccd3d
-
SHA1
ec251532c699b86fbc78475f58a4903830df547a
-
SHA256
bd26414464cc5df758a8f119f80a1958205825fe857dea794add8da09c55ecd1
-
SHA512
c96b0c74abf4ba2655594e3dc3dea76ff24f230c95f79430ebc2da937982eb6f3e276c60bfe7bced05372f70ebfbf8b78f20900f955b2a6bcd0d6b7ffecd4ff2
-
SSDEEP
12288:NeqC0g6qIZ5XVWIM3Rn24Vh3BXWzcmQ1VKF1FJ:NeqCv6qIZ5XV62Mh3BmgmQ7KF1v
Score
10/10
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage 2 IoCs
-
Drops file in Windows directory 2 IoCs
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\65e3c643bf0a434ca0c88c032afccd3d.exe"C:\Users\Admin\AppData\Local\Temp\65e3c643bf0a434ca0c88c032afccd3d.exe"1⤵
- Drops file in Windows directory
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1408 -s 3922⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 1408 -ip 14081⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.8MB
-
Filesize
284KB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
236KB
-
Filesize
24KB
-
Filesize
1.8MB
-
Filesize
284KB