Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
979ae583b77ae8fbc18e0fd89a99797a
-
Size
86KB
-
Sample
240212-zx9q4acb4y
-
MD5
979ae583b77ae8fbc18e0fd89a99797a
-
SHA1
7a9ca180e512ec592856cf1504eff119bd59b688
-
SHA256
69842ae5476580141b1a027761845cdb5a47d5b00d88825b7af57077f6d7112b
-
SHA512
caa1ca2b25c9cfbd34d6c64a7c4e3bcead41d5f625221664ec9a797d3b144016eb700c8fdc913ae66bdb9153bedd95debb3060171b4524ea7082d368df0357ec
-
SSDEEP
1536:scHA5dZuvrKA1r4Jwwi55dlvo89UBYKpJ0pHWG7m9pAsiyRsUuh8iO70Lt:scg7UrKqUwflAZYKX6aAsiyunQO
Behavioral task
behavioral1
Sample
979ae583b77ae8fbc18e0fd89a99797a.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
979ae583b77ae8fbc18e0fd89a99797a.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
979ae583b77ae8fbc18e0fd89a99797a
-
Size
86KB
-
MD5
979ae583b77ae8fbc18e0fd89a99797a
-
SHA1
7a9ca180e512ec592856cf1504eff119bd59b688
-
SHA256
69842ae5476580141b1a027761845cdb5a47d5b00d88825b7af57077f6d7112b
-
SHA512
caa1ca2b25c9cfbd34d6c64a7c4e3bcead41d5f625221664ec9a797d3b144016eb700c8fdc913ae66bdb9153bedd95debb3060171b4524ea7082d368df0357ec
-
SSDEEP
1536:scHA5dZuvrKA1r4Jwwi55dlvo89UBYKpJ0pHWG7m9pAsiyRsUuh8iO70Lt:scg7UrKqUwflAZYKX6aAsiyunQO
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Drops startup file
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-