Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
SOA..exe
-
Size
608KB
-
Sample
230330-jly78ada91
-
MD5
29e1f1d82f7cf1c2f4f3e8e6eb40ea9d
-
SHA1
18ec7c08df90813779969c8c864edb39493b4ec0
-
SHA256
7b36ba68604194c04691a704eecef41ed011a7c3f36054948a2b3a6d34276e4d
-
SHA512
571bf141f190d6776943a07dc041da0b2aa7afabe2ad58cd8ebe4a7bf219e44d4ef560620d182bcf2cccf094c0e200617fc92b459ae5a7ac0561e0775a799c8f
-
SSDEEP
12288:YeJ/sIy3rlhsimOMt+RdA2U4u41Hj0WXHCTA2FAYNt01Jp29jZ:Eh+imXuAw1X3OA2aDq
Static task
static1
Behavioral task
behavioral1
Sample
SOA..exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
SOA..exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
lokibot
http://64.227.48.212/?page_id=4136377
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
SOA..exe
-
Size
608KB
-
MD5
29e1f1d82f7cf1c2f4f3e8e6eb40ea9d
-
SHA1
18ec7c08df90813779969c8c864edb39493b4ec0
-
SHA256
7b36ba68604194c04691a704eecef41ed011a7c3f36054948a2b3a6d34276e4d
-
SHA512
571bf141f190d6776943a07dc041da0b2aa7afabe2ad58cd8ebe4a7bf219e44d4ef560620d182bcf2cccf094c0e200617fc92b459ae5a7ac0561e0775a799c8f
-
SSDEEP
12288:YeJ/sIy3rlhsimOMt+RdA2U4u41Hj0WXHCTA2FAYNt01Jp29jZ:Eh+imXuAw1X3OA2aDq
Score10/10-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext
-