Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
147s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
24/09/2024, 02:37
General
-
Target
56b3f950f86319870611c364b467719a.exe
-
Size
722KB
-
MD5
56b3f950f86319870611c364b467719a
-
SHA1
ef7e6573e08777e8496f3c5f68fb34d545c9fdcb
-
SHA256
f55ce0741ed4615bae5646c644b3a971323ac344b12693495d5749c688d5d489
-
SHA512
43d0da4349ff27c99d7184dfa810527591b158fc2a053b6e289ee2d2ee9a3da5389c90213e82ab5a4d9abd7af43d5f5db007d3d4d66dc2620409cafe48ead147
-
SSDEEP
12288:HoDzEcLL4ZjVUi0EosOijSmrXO9Ax3mIEDs0wvw1BjSxFrXhy:HG4s0jVLyijxZx2qI1BSxdXE
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage 4 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 4 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of FindShellTrayWindow 64 IoCs
-
Suspicious use of SendNotifyMessage 64 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\56b3f950f86319870611c364b467719a.exe"C:\Users\Admin\AppData\Local\Temp\56b3f950f86319870611c364b467719a.exe"1⤵
- System Location Discovery: System Language Discovery
-
C:\Windows\system32\taskmgr.exe"C:\Windows\system32\taskmgr.exe" /41⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
-
C:\Users\Admin\AppData\Local\Temp\56b3f950f86319870611c364b467719a.exe"C:\Users\Admin\AppData\Local\Temp\56b3f950f86319870611c364b467719a.exe"1⤵
- System Location Discovery: System Language Discovery
-
C:\Users\Admin\AppData\Local\Temp\56b3f950f86319870611c364b467719a.exe"C:\Users\Admin\AppData\Local\Temp\56b3f950f86319870611c364b467719a.exe"1⤵
- System Location Discovery: System Language Discovery
-
C:\Users\Admin\AppData\Local\Temp\56b3f950f86319870611c364b467719a.exe"C:\Users\Admin\AppData\Local\Temp\56b3f950f86319870611c364b467719a.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
342B
MD5aeaedbe49cd94985b9e61949601c1c94
SHA103707d3e411213ef6c5e1a1eed98928ceac3fd87
SHA2564a199a8c35a6f1890b85105527f97d7f95f313c66449b8b97649efaf8913fa00
SHA512761367152c7bca537de850a6640586463d7699f7c231a3eeb3c30a22d162c08f23b7e3972e3c702dfe6c42bbf5773041793eba699ad054579b6c0b9abd3bc527
-
Filesize
342B
MD5163f6d87a55540c453e1e830715d831f
SHA1cb3edf1f8b23b6bac46349eb697d559f13837052
SHA2563776d68a2620738598fdfab1bf39613d1b5b32b5ff23d6e25e32030eb59bc45f
SHA51249754194aefe6083bb84abdf4daca70200ddcfd2aaeedcaa46d7478e25b8955efec3b00bff42290cff57c3974e8b110b4fbc48dd61bb52cbfc5053b37235a264
-
Filesize
342B
MD58e0a2a7bb7f05b4953b574a963f0086e
SHA14b6640cefb74b54c46a7d73424ed35486d40dcaf
SHA256b24b7e6ab89c90a1b144652938078c2cf5204bfebe3bf2bf1f58f574ea205663
SHA51283dd55339c97eeb09cdd7872bdaca94a695e92e416cf6084940367fbdccf123a5d15029fb3dadfc5d4a1cab22c06642126d39f2e1bcf3deb7e64bc84db6f305b
-
Filesize
342B
MD5c719e75eb2130186b2470fadcc96685e
SHA16bfe54f8de5fa26e0c746b4cca76df68f0c513f8
SHA256879ab7f16f3c8cb1ada52f388983b6fa9e1bbab8495288c44ca7f3000a9f7146
SHA5126a557290390ce47f2c7acda451cd17d3d2740dd3adf5a53d852d870c533bb10a83907632b0db355f36157b864bd7e3ebcaeb8a96c7fad54644d259cf2026e21b
-
Filesize
342B
MD52c4d5dab56fceb386d5df8da84d9255e
SHA1e5f1a6715d6e25e6bad54df8d42a56704ce12795
SHA256d7a3275396d9bea7f08768e600f5adc976a344d296cf16a50352a4359e66a4fe
SHA512f1ea5ff6f34b5ad5d8096ebda33b2e92b845b50d22fce44d015c49442d426f0a5bd1c953022622d6954be77304e89cb920ed971c5f5b0213f6bfba99f38678f0
-
Filesize
342B
MD59ba8659748f450575049b838829211ff
SHA19fda6b895183e6a71d84a03913007cdf0e9f7bd9
SHA25669a0876ddb885bce98481e212e6b74cc9971bd3ae708828bb1ad8f95f5df7f0a
SHA5123c795858297bdc8dc56159e5604337f361690bdc65fa1973956315796d179bd9359f5e26774e2cd023f0ec565eb605a079971e6dff0f67c1de26a370202cd35b
-
Filesize
342B
MD59a846eae5fbc1bf326f9fa7b5a3aa65e
SHA155a93e438b61be922937774d053dedbefc634313
SHA2565ee15129b43092db3065c253c8ae14cf777203ce5a07a06c60a240d6bde119cc
SHA512f45c921bf0e95031efa17d6e46ed7acaa7049e9b2fe882803916844823cf0ab2a26a7f74fd235719eeafd1e33646dfe246eb2bd4d2fc15f55f38da2a80543315
-
Filesize
342B
MD5afdc5f18360091d87a2ed8ef3212d522
SHA1f16734e7075b5baf60a42c3dcbc9fb90cf33aa6e
SHA2562fd1488511eec8b39a18a76c91b653f5cf7f8f66d43c37df60082fc173becfc1
SHA5126ee5408d029ebc52d71d5b8970b7aa93f75935cbaddb5dcfd9111eddb9c76a9db0ba2ebc2ae3b72609d32b152990c705b862fc790880fb834b28563583f04b7e
-
Filesize
342B
MD5bd390a6dea4ec73cd83d7171289f6f7e
SHA13130b6139d381478aab036933c70be7ad63eb196
SHA2560d0d308514ad4a936e851e2dc071a9f67fe7c49cb024c96d791f0ed1310b850b
SHA512c838b99ede1efa1241dfdc2fe8d9ca39ba8a42089a640de684e20ca8fe12858a13e5c1088d6c3215a2d3b3f0fc1b9a62c6d97547303ee5762945bde01932bc31
-
Filesize
342B
MD5cf9ab8c12d55434dd7300c62c1daa907
SHA10da48361e2aff1324f1d337431ab3640cc304e97
SHA256622dcc810646b24fb3d9bfa2d0ed97a6d032800bda847ea6838770261046b73d
SHA512b5cfd3e5a3de3256a220ac06912dc00deb245dad48f322e00de7adeb5283b288f8166e48c3d123f28317fbd461609a9775b66d69fb2d09086d94f3b054faaf23
-
Filesize
342B
MD5dad5471ec7841ab192e0bac2f6ae324c
SHA1d89bbdde7e6ea5da738ac465142577cb3800dc48
SHA2563695a49b806fb3e9e187364c8fd55bee4d99fc345ef11927afb355db86133dc0
SHA51211ab9d10fe63099e5c84b8192bf29ab2cdd20602d28e2d6cfcd81bed1aabdeffe02866bad87cadfe013e25e0438a1c23220d7fd4f42434aeb8261c85ac7b365b
-
Filesize
342B
MD5f483a559785f151706c54a6b5fa22000
SHA1b5d0354e7462191865f3edd17bc6e4996cda7d80
SHA256acafcf91a542f3dd5b6043df8152b7112e1ac757c5f3c01f90d7c8bf60c2825e
SHA512cf829e002e02d361fa6e11635541ce3c579df7c1e2a9d2706bdf22651dd7483aa1cbc8b3100c84247680adfe4d2050f365f46220999cdbad05e34177fd81917c
-
Filesize
342B
MD514018419bb9a5bb9d0a8b0939c144224
SHA16b3d7a95927d0ac36e3837fe66e93ffae6a62409
SHA2567296b1fced33bffe52b0f287026b9bccc002635fcfbd9089dfb16a44947c94d7
SHA512563ed1fdebac69d66cb035cbd9ad7a023811cab21693b71f8fcbe609ee100143e53be22958c47ebdcaec48ccf04cd2ab5b11baf8e2795378f0c0af291cf8b4fc
-
Filesize
342B
MD501e9b99fcd48180ba0400fc49ab66970
SHA18faa4e4ac6aa7e002bd0c2e7147168e14feb6194
SHA256c657284026e467447e405bccc984dff94b5ad8825e5b861332255dec3afd0830
SHA512d370d34ee97b0f089fa46a02a20dd82b63cc842e46c282f349db2a5c0bf3840d7fa12af48ff9302ca6d264de4415ecf355b00cbc7f509f3e37a89efbb5b3b2f5
-
Filesize
342B
MD53d54302a4ebd575f6857d14a656a002b
SHA1e416950133edc50d0a8a8aa68e9f2dfc6ebb3490
SHA256b657c63e2d0d3d2523d4f9c009651999fb5a4aa9d956e07efa56adc1ad17242b
SHA512ec67482a372a2dc3e98df3d59554299d87efe7c3d7d50c6377f2e5a08880added89ed337573d561cf976d8d7a5b82ddce8b6196b9734602e7f5964b136b4dd8c
-
Filesize
342B
MD55d51bee227313dd9f2606da738a39240
SHA19de15b973350129a5df73420dbe6f5366c56c71b
SHA256fc876811904c4216dd778a0a17bab342a33f179a6cbbe3301f3f1c867af4931a
SHA5121a31057ee5ccecad55036604bc10aeea1036d5b7efe2971b95ca7a9d5cab1697a16b773ca0f5b452bce9edd4412883b674bf84cff545d041988fa82630027438
-
Filesize
342B
MD57e3c4393fccea46f32bffa5db4681d8f
SHA12212d0ea3f06ad91ba065bd910555d196ea0ee8c
SHA256eefaa7a828830e31d6b524862946ebdfeebb6c7581a8a1ab64f81241515fef43
SHA5120da18f38ce2872f9d7d6d1871e68bd6a1666e44d32ba59a9fb87e80d1a5edffe71bbb7f035998a14c53a2dffe14842d449c3586988a56bf2136ff439ab38cdb1
-
Filesize
342B
MD59d1bf0f57c3806b6a50a4b6efe5aaf7a
SHA1202758dc8ddd42685ddcdfbf87ddb3bb3b8c4ac6
SHA25664a6d539c3b5ba86c7247b1f03e921a9fd3fc6c12813e6750db6a5e8806abf98
SHA5127f838e7d65a092b7f382beb296e8d9141d8083aeb295be3645279cb90fafa96f2b4a04e2d622fcfcbb28604f3c4cabd70b7d4cae27fdadb53a859d5c19cd882a
-
Filesize
342B
MD532a1b07743ca72235ae895d5e6b51f30
SHA1f129456fbb527c858eed2088abea04e1b60e64f8
SHA2560c3bf7830ebb13d5ad83f7805f28a89dd1bc3ded0b66a844f5fe428b1f063b4a
SHA51216a596e24b47ac31220d032e4104024e084f5aded35eea64cbbbc440647239393f9c8b6183674cc012a17c40d56266b62129070e39bf53a1bdc623e2a5295fa6
-
Filesize
342B
MD5591f85acd887c3a95b1dc7ab96050b77
SHA110cecddddd9d73f3dc9ee0cebaad9a283bed6461
SHA2564b769acd51626100a71b3dff716cb6d791c98fde2fb8e501d7cb32ee1a124eff
SHA512d1f04692469baacaef1908ff52a9745f3e1bcd516e38494b759c0592408bef83311ee5127c97b7c10fbf7c58fa740a5c8470a577bad40f02969a4bdeb870a52f
-
Filesize
342B
MD5a07c9c05b9257205df27609e13207866
SHA1769950d71242f7ab38027fe99173d0fc64254a04
SHA256cc50f28189740c2a2263d402c4fe9604a5f3f50c3ecf2a5a7602b311de79aa83
SHA51265d869e87c33d6fdc0675fb9d30788558ba96fd09335e753160903549e475ecb8c65b74ec127967aa5ae32cb6e4da78002b2ab0c254e921b31f6a5e57b656b16
-
Filesize
342B
MD5b55928719d4a89ce96d5477a21f7d682
SHA1dceb0f717b006b3702e3ee48b608d62dd104994f
SHA25667ba3584a57fdb340233bad9da0452cc59dc1868346c85ab1a72d7b3d33fe86c
SHA5124f9a47cb26bd99726f2ac65f3797645019f35fa7aae8a5c596da4a8f2e3f345ea7c6299fdc70306dda20b69f2812d060d31089e0b287964a48d1b7a6467f0732
-
Filesize
342B
MD56e3ee41271003cde78c40bc83cab3c8e
SHA1441d5be65b7df992585c19aa0fb329428b1fe08b
SHA2565d2926a89e6972035f8322729ad9822ded29a19fbd9026c542baf5419111f80a
SHA5122b5dcedfae4d51b0738aa091b6cc0a7bf9fef5bc4e206aaabfb3c837c0f0ec6b52d9d5c030158b69ee16625ac33afdf24f2116fd4a65856b7c7652015db9521f
-
Filesize
342B
MD5c4604ccd7fd491129bcad3eb9530f17f
SHA16c93493bcfbd31fe398f54c548a507502f0e838f
SHA256bfd480b79ff03e1ca3dcdd00f0c3f6af36c17f1a0afecc7bc73be397deeef478
SHA51283579c515252ddb225b9ab3339a2c6b7791fb1cf5554f7a7c2d02d9b8da1581e6c08d8af7facd7be42504e93bfac141a337165b72bd859732cb4b850a6bca50d
-
Filesize
342B
MD5a1c62c176369382594e687b8b5e9493f
SHA16468ff227ee57f572c6ce81fd3b11577f50f7fd7
SHA256865538a8f8c66e11c2f65b7bb49686b525f886ae20902b0f3086ddec26fae074
SHA512fc4c440f20f8aff8901214d9d882f150a1538fe1b1105b377fd0c3aaa81ea99308d28038fc5f3fdf08d9bbc12a02e655cf42b35db773ab7ebf0a0e26a3f0bc8d
-
Filesize
342B
MD5ade6ceb6201fac5a8a7731e39bf037f6
SHA171539e0ee5a88d26a44830d09a2e02ce7e6adcb5
SHA2564620fe4372e1c8a815421078a5fa685e5d0d90b598c61e877742fcca6e328921
SHA512974fe03059212f6c447b398ca7a06752d8fdadba84577abf21d20e9311322ddae099c66429341c0bb2f2ab68aa9bac3d25b823d38634225e0c582be1a89e5f55
-
Filesize
342B
MD5432cb8cf815d0971d21415454fa142e6
SHA143ea86d9d28127db875eecbdd0b1fddfa641f6a2
SHA2562029f540d80ede263e2d05da7b01449d50cbd4dec0eadbf40d56ec003e666dfa
SHA512141850c1761c3e2268874aa678083902be1422959225d775a6d2c6a4c7dee237c30d756c434591bf92bddb76ec6678f496b5b71cab1edcb91292c3614ded539b
-
Filesize
342B
MD5250169284ec4de40c5c533eb07ea11de
SHA1ebe0c24d7ba526f3c9cd12a17bb451b71f680838
SHA256915343dac928349b1fafa02b4aab25820a4a25f32c93bc63fda02b19b1e73079
SHA5122cbf94e61639052d97720a6f1db4a6e1e87204e62a61828290c611e608645247621d1fb4ca6e5c1d57f927eb707515aa96a569120dfae1a6b778be11987ea1be
-
Filesize
342B
MD5f46f3bce97795a8d898b89138a89ac2f
SHA18851dad81b2dc228db47d6cabd5d4fd49ad5a9a9
SHA2569402d63cb9a1e896889e47c30742a5491ff78f73fd1a8021c1cf43cc45a86b63
SHA5126b827152a5a5a10b6b1e3bca65457f23fd16bd67d37acbb30d0746fa995175efb4638bdc93adccb8e00717726fb768099db554edb2f79a47eb976ff8a8b9da4d
-
Filesize
342B
MD59d2bdbd73754b04ced4eabee51d3bf82
SHA131f168f40c65f8f8a3393b69dec339cc739e3d19
SHA256b013aa3885944a2c15aeafc52de989ba2899d1942244d23720e32e28648a7c61
SHA5129c38b5dda8e5de6ef039aafc9cdb27ad18831242f020dcd0050c95f72d68efd74065ed8f760c4558c052e4b83e7b895ec7f4fed06b08838ab1417aeb89b4319d
-
Filesize
342B
MD52459ed36b2b1408ba24cf95aa80d7396
SHA16875937f844ae72c0580b158ff41ef1be48a1ac1
SHA25669f8fb01c1432572c1f0153a2930cb3eba90fc18a370fe3e102dfc312751f616
SHA5128442a9103d56c3d5c5f0dc93b00694219d1d326ca3bf9490388aa0e2fc25c723f1f772151424d29b036e093eab42d7c0e350541d5e7caf6f0691d70cf744e824
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b
-
Filesize
5.9MB
-
Filesize
5.9MB
-
Filesize
5.9MB
-
Filesize
5.9MB
-
Filesize
5.9MB
-
Filesize
5.9MB
-
Filesize
5.9MB
-
Filesize
5.9MB
-
Filesize
5.9MB
-
Filesize
5.9MB
-
Filesize
5.9MB
-
Filesize
5.9MB
-
Filesize
5.9MB
-
Filesize
5.9MB
-
Filesize
64KB
-
Filesize
5.9MB
-
Filesize
5.9MB
-
Filesize
5.9MB
-
Filesize
756KB
-
Filesize
4KB
-
Filesize
176KB
-
Filesize
4KB
-
Filesize
176KB
-
Filesize
756KB
-
Filesize
756KB
-
Filesize
176KB
-
Filesize
176KB
-
Filesize
756KB