Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
b7ad7f3f9ab6f6efed1b17b36f8f10ce
-
Size
297KB
-
Sample
240306-r9txeabe9t
-
MD5
b7ad7f3f9ab6f6efed1b17b36f8f10ce
-
SHA1
1e93ae712960fc7602acf5dee9708047a1c253e2
-
SHA256
ce207e2947bf28ce45b063ed003e4a80e4e164aa4d1002c246044d9c3dd33bf2
-
SHA512
28fb9445f2fc26e87f9034e85b86f83f0899d05aa77dc19814079fe7c06a50dd77234bb51eb16164a95ff6798c63e9fd4ac146a278d1cfc651a9024014f16d8e
-
SSDEEP
6144:05PmRalZQEgCwAJ8FZDO1GWMrrw94pwqRdv/7M4PDrsX:0NmRDEtJ8bS1A3w9Qw6g4PDrsX
Static task
static1
Behavioral task
behavioral1
Sample
b7ad7f3f9ab6f6efed1b17b36f8f10ce.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
b7ad7f3f9ab6f6efed1b17b36f8f10ce.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
lokibot
http://185.227.139.18/dsaicosaicasdi.php/eOUCAsuJW0chL
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
b7ad7f3f9ab6f6efed1b17b36f8f10ce
-
Size
297KB
-
MD5
b7ad7f3f9ab6f6efed1b17b36f8f10ce
-
SHA1
1e93ae712960fc7602acf5dee9708047a1c253e2
-
SHA256
ce207e2947bf28ce45b063ed003e4a80e4e164aa4d1002c246044d9c3dd33bf2
-
SHA512
28fb9445f2fc26e87f9034e85b86f83f0899d05aa77dc19814079fe7c06a50dd77234bb51eb16164a95ff6798c63e9fd4ac146a278d1cfc651a9024014f16d8e
-
SSDEEP
6144:05PmRalZQEgCwAJ8FZDO1GWMrrw94pwqRdv/7M4PDrsX:0NmRDEtJ8bS1A3w9Qw6g4PDrsX
Score10/10-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext
-