Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

1220-67-0x...ry.exe

windows7-x64

1

1220-67-0x...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1220-67-0x0000000000400000-0x00000000004A2000-memory.dmp

  • Size

    648KB

  • Sample

    230516-ngnm5sae39

  • MD5

    6aa1fec99aeb08104e76f8e0b76f6a65

  • SHA1

    e51f0b1acfa94e9824cd4869caf14136bb3464c1

  • SHA256

    4fa8ae1b257d1f45ff597ce79d27dbacb51ae4f01c8bbd09a173ceb84ceca6ed

  • SHA512

    9d5051483ee0f2846b5346282aabe6fe84ff89e4ae0b27d889d69ab42f00a92c82cbd483859b2cd0d83da67cef3db7b6885b3fccd272635311b72a324987638f

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://104.156.227.195/~blog/?p=769866

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Targets

    • Target

      1220-67-0x0000000000400000-0x00000000004A2000-memory.dmp

    • Size

      648KB

    • MD5

      6aa1fec99aeb08104e76f8e0b76f6a65

    • SHA1

      e51f0b1acfa94e9824cd4869caf14136bb3464c1

    • SHA256

      4fa8ae1b257d1f45ff597ce79d27dbacb51ae4f01c8bbd09a173ceb84ceca6ed

    • SHA512

      9d5051483ee0f2846b5346282aabe6fe84ff89e4ae0b27d889d69ab42f00a92c82cbd483859b2cd0d83da67cef3db7b6885b3fccd272635311b72a324987638f

    • SSDEEP

      1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG

    Score
    3/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks