Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
bdf852ec05009c4f80414ad63169ace6
-
Size
542KB
-
Sample
240310-hsnvdsfc9x
-
MD5
bdf852ec05009c4f80414ad63169ace6
-
SHA1
f5980cdc0763209cb6c941f1e2a1aa7db8043199
-
SHA256
bebae75f3bd53bc1286bddb1c59d43321c381fe63093900fd1a28362d3cf1a34
-
SHA512
29000849b85b316de82387ba8935c28b236d82b60f7d9c6c41af45d9b7cebc88a29721a145bb01cfa897484a767402973b6d626eadf5ac9dcfd48eb0fc7905a2
-
SSDEEP
12288:Ie6cPBhTwXIMbK1R7d8IiTvSGT8gtFRHHkX+pd167QhEX+zQ:IJQTwYMb6dqIiLSGbFNkE6EhTQ
Static task
static1
Behavioral task
behavioral1
Sample
bdf852ec05009c4f80414ad63169ace6.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bdf852ec05009c4f80414ad63169ace6.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
bdf852ec05009c4f80414ad63169ace6
-
Size
542KB
-
MD5
bdf852ec05009c4f80414ad63169ace6
-
SHA1
f5980cdc0763209cb6c941f1e2a1aa7db8043199
-
SHA256
bebae75f3bd53bc1286bddb1c59d43321c381fe63093900fd1a28362d3cf1a34
-
SHA512
29000849b85b316de82387ba8935c28b236d82b60f7d9c6c41af45d9b7cebc88a29721a145bb01cfa897484a767402973b6d626eadf5ac9dcfd48eb0fc7905a2
-
SSDEEP
12288:Ie6cPBhTwXIMbK1R7d8IiTvSGT8gtFRHHkX+pd167QhEX+zQ:IJQTwYMb6dqIiLSGbFNkE6EhTQ
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-