Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
tmp
-
Size
611KB
-
Sample
230209-mzqd1shb2w
-
MD5
a0de6cd6ca9a510a7c5d84c2cadcf4e9
-
SHA1
571d8ee87c54d119eed3d622f1181e76c37e4493
-
SHA256
8be9f11fd4be503d013fe9ed0c38f556cd3eaa249682003df3fb907cd8a15ffc
-
SHA512
526b24837d21e0519251135fa9385f966f26e5f4820a15919a8d1461a3b460d52e5112cee0c0b423a39a28eceeaf9cbbc628d03c96245b8e75677b66b21f48ba
-
SSDEEP
12288:aC8Xppn853e6i34+qMbQv3g7ICcyU1PUGQlQX:6IRteQqcyMPUGQlQX
Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
lokibot
http://171.22.30.164/zang/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
tmp
-
Size
611KB
-
MD5
a0de6cd6ca9a510a7c5d84c2cadcf4e9
-
SHA1
571d8ee87c54d119eed3d622f1181e76c37e4493
-
SHA256
8be9f11fd4be503d013fe9ed0c38f556cd3eaa249682003df3fb907cd8a15ffc
-
SHA512
526b24837d21e0519251135fa9385f966f26e5f4820a15919a8d1461a3b460d52e5112cee0c0b423a39a28eceeaf9cbbc628d03c96245b8e75677b66b21f48ba
-
SSDEEP
12288:aC8Xppn853e6i34+qMbQv3g7ICcyU1PUGQlQX:6IRteQqcyMPUGQlQX
Score10/10-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext
-