Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ba8e34d80b184394dceb22152eeec2f3351c1616
-
Size
213KB
-
Sample
221007-bkkdnsbca8
-
MD5
577db388dd90afdb6411b3c297162bc1
-
SHA1
ba8e34d80b184394dceb22152eeec2f3351c1616
-
SHA256
0fc909415368be8991f2eaf597ff2638a58f3f365a252f41385ff71b8818bb78
-
SHA512
1b9ee048a5a49d08177913ec6f11b7c15e9cda8fcb347fb3465ebbd350022e7c3721fc14fbfa240974296135c7590939d96063363124e10d111862588a11625f
-
SSDEEP
6144:FDOg5Rr8fFEVEsvgJnW9wLu3Zmwac7l7MlZEVDS/:N589SEsvgJtq7l7MlZ5/
Static task
static1
Behavioral task
behavioral1
Sample
ba8e34d80b184394dceb22152eeec2f3351c1616.exe
Resource
win10v2004-20220901-en
Malware Config
Extracted
lokibot
http://ziuxte.online/o/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
ba8e34d80b184394dceb22152eeec2f3351c1616
-
Size
213KB
-
MD5
577db388dd90afdb6411b3c297162bc1
-
SHA1
ba8e34d80b184394dceb22152eeec2f3351c1616
-
SHA256
0fc909415368be8991f2eaf597ff2638a58f3f365a252f41385ff71b8818bb78
-
SHA512
1b9ee048a5a49d08177913ec6f11b7c15e9cda8fcb347fb3465ebbd350022e7c3721fc14fbfa240974296135c7590939d96063363124e10d111862588a11625f
-
SSDEEP
6144:FDOg5Rr8fFEVEsvgJnW9wLu3Zmwac7l7MlZEVDS/:N589SEsvgJtq7l7MlZ5/
Score10/10-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext
-