Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
9c6737753b3e1fc85c9d76634985c63c
-
Size
60KB
-
Sample
240214-xqdc7sbc33
-
MD5
9c6737753b3e1fc85c9d76634985c63c
-
SHA1
c01154959a7478c76637bc2f2e5f866f5a8b863a
-
SHA256
1932a5b773cdd7678ccc122ebb9d5f7c70455f5800c20e3ba39700ed73b5569c
-
SHA512
23b63ad778be126be6500a09e19bc3fcf14551f3db980fd951f867684a4f462451ea638bda3345369e5c820765ab5ecb56143adb85d4b4b43da52c75c963e93e
-
SSDEEP
1536:xm7wjsVTJ+p3JrkGLawHE/E2j+EDmDZIYcSCggVLkX:e+sVT45mn/bjncZIHlkX
Static task
static1
Behavioral task
behavioral1
Sample
9c6737753b3e1fc85c9d76634985c63c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9c6737753b3e1fc85c9d76634985c63c.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
9c6737753b3e1fc85c9d76634985c63c
-
Size
60KB
-
MD5
9c6737753b3e1fc85c9d76634985c63c
-
SHA1
c01154959a7478c76637bc2f2e5f866f5a8b863a
-
SHA256
1932a5b773cdd7678ccc122ebb9d5f7c70455f5800c20e3ba39700ed73b5569c
-
SHA512
23b63ad778be126be6500a09e19bc3fcf14551f3db980fd951f867684a4f462451ea638bda3345369e5c820765ab5ecb56143adb85d4b4b43da52c75c963e93e
-
SSDEEP
1536:xm7wjsVTJ+p3JrkGLawHE/E2j+EDmDZIYcSCggVLkX:e+sVT45mn/bjncZIHlkX
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-