Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
PO # 450013816 for P10’2023.exe
-
Size
456KB
-
Sample
231031-hn8zrsbb93
-
MD5
64c127bea281ea72353453d04aaeba26
-
SHA1
ff9c344c8905f767482082fc11aa5288882f6015
-
SHA256
b7132a46974ab6e499b4cb00c76eff0e299a24d720cfdfdedba2e4ff62b9abe9
-
SHA512
ba889652d8a52d1a49710b487d0d342d43da03e28116d264eef60e873dc72724cc0dda9c41f095ed6d3d78811f1a5250fc84136ed0707d9c8f1117a8bc97d864
-
SSDEEP
12288:aUR6HoaTbU3c1g5wTGrY9qseCMEVipTxwC6o7hgn:aUR6Ss1gmTQvCr0wkgn
Static task
static1
Behavioral task
behavioral1
Sample
PO # 450013816 for P10’2023.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
PO # 450013816 for P10’2023.exe
Resource
win10v2004-20231023-en
Malware Config
Extracted
lokibot
https://sempersim.su/a18/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
PO # 450013816 for P10’2023.exe
-
Size
456KB
-
MD5
64c127bea281ea72353453d04aaeba26
-
SHA1
ff9c344c8905f767482082fc11aa5288882f6015
-
SHA256
b7132a46974ab6e499b4cb00c76eff0e299a24d720cfdfdedba2e4ff62b9abe9
-
SHA512
ba889652d8a52d1a49710b487d0d342d43da03e28116d264eef60e873dc72724cc0dda9c41f095ed6d3d78811f1a5250fc84136ed0707d9c8f1117a8bc97d864
-
SSDEEP
12288:aUR6HoaTbU3c1g5wTGrY9qseCMEVipTxwC6o7hgn:aUR6Ss1gmTQvCr0wkgn
Score10/10-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext
-