Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2402f165befaa33e3700592cb7defe4c
-
Size
536KB
-
Sample
231225-rcqhqagdb4
-
MD5
2402f165befaa33e3700592cb7defe4c
-
SHA1
e1c0b072bf018dc8af85ff4972a7e0718a4c7bf7
-
SHA256
cd71cf303bb183ffcf34487f8db9b3c05f517e0659b972153d5739422da9fbf3
-
SHA512
ff5f1dac40696ba5875abd8baad70b6b5c2fad8485530c6a09217c5d1ce9cd57b761861aa4d07998b13f12f85353336332649b3b6fa036489cd95d8a5a89e322
-
SSDEEP
12288:C0v18ALEf9yyKEyBxH8qr+axm9UfQ0J+/t3zlVlhq40wTgcJ:C0v18ALEf9yhEExc4m
Static task
static1
Behavioral task
behavioral1
Sample
2402f165befaa33e3700592cb7defe4c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2402f165befaa33e3700592cb7defe4c.exe
Resource
win10v2004-20231215-en
Malware Config
Extracted
lokibot
https://luoslasco.xyz/to/ya/vd.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
2402f165befaa33e3700592cb7defe4c
-
Size
536KB
-
MD5
2402f165befaa33e3700592cb7defe4c
-
SHA1
e1c0b072bf018dc8af85ff4972a7e0718a4c7bf7
-
SHA256
cd71cf303bb183ffcf34487f8db9b3c05f517e0659b972153d5739422da9fbf3
-
SHA512
ff5f1dac40696ba5875abd8baad70b6b5c2fad8485530c6a09217c5d1ce9cd57b761861aa4d07998b13f12f85353336332649b3b6fa036489cd95d8a5a89e322
-
SSDEEP
12288:C0v18ALEf9yyKEyBxH8qr+axm9UfQ0J+/t3zlVlhq40wTgcJ:C0v18ALEf9yhEExc4m
Score10/10-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext
-