Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
Build.exe
-
Size
18KB
-
Sample
241002-qzet3ayfjl
-
MD5
92d87c1c5d983e7aa3aa327e19a3f186
-
SHA1
40af71cfe33e3c1fe2e2e8da012e47c43ca4ebfb
-
SHA256
4498db4f469d538dee96374c65f8af004beec87381bec52bb1273ef6c939cb56
-
SHA512
1d64f71d270ad8c899bb519267ac40a75af67a2b7a296d8cd0dc5530d53182bf703211be3e278859f888a2b95d0e0686ea364076df4b84bf2d65c8fe6c89e0ec
-
SSDEEP
384:DEw7wknHOYXQdhLGPvCaV4pLS7OGQ8xy1CzcaXtQXkqAne:DEw7wkHOYEGPvCaV4pLzb1fa9QXk
Behavioral task
behavioral1
Sample
Build.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Build.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
Build.exe
-
Size
18KB
-
MD5
92d87c1c5d983e7aa3aa327e19a3f186
-
SHA1
40af71cfe33e3c1fe2e2e8da012e47c43ca4ebfb
-
SHA256
4498db4f469d538dee96374c65f8af004beec87381bec52bb1273ef6c939cb56
-
SHA512
1d64f71d270ad8c899bb519267ac40a75af67a2b7a296d8cd0dc5530d53182bf703211be3e278859f888a2b95d0e0686ea364076df4b84bf2d65c8fe6c89e0ec
-
SSDEEP
384:DEw7wknHOYXQdhLGPvCaV4pLS7OGQ8xy1CzcaXtQXkqAne:DEw7wkHOYEGPvCaV4pLzb1fa9QXk
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-