Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

80341c6d17...18.exe

windows7-x64

1

80341c6d17...18.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    80341c6d17d41be94132ad42d0b2ca9b_JaffaCakes118

  • Size

    1.1MB

  • Sample

    240529-k22hyshe8x

  • MD5

    80341c6d17d41be94132ad42d0b2ca9b

  • SHA1

    0bfac16a9dea06a55210b5af666748223d43d33b

  • SHA256

    20c23f7f807e5f0188a728af0e6a8b88fd5c34d2e063b9cd31a7c5cd55df3e4c

  • SHA512

    9b694ba836972e465d4c3cf11fd8f28d2510d363764890af25b567cec7adaa579bc4b7752a9b1a015e4a96b4560f99a79136d5067ef9eb1addaa71ffa181d67b

  • SSDEEP

    12288:8bkFmQkSZkM/JyuzWfCK9micSAOyP/gQh3XjjJHF2JV8NdzxfpB+vmbeTxFwPXKP:8w4+kM/Jyu+77AOywQhHzxfYEeVFwXKP

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://www.gtsworld.in/bobby/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Targets

    • Target

      80341c6d17d41be94132ad42d0b2ca9b_JaffaCakes118

    • Size

      1.1MB

    • MD5

      80341c6d17d41be94132ad42d0b2ca9b

    • SHA1

      0bfac16a9dea06a55210b5af666748223d43d33b

    • SHA256

      20c23f7f807e5f0188a728af0e6a8b88fd5c34d2e063b9cd31a7c5cd55df3e4c

    • SHA512

      9b694ba836972e465d4c3cf11fd8f28d2510d363764890af25b567cec7adaa579bc4b7752a9b1a015e4a96b4560f99a79136d5067ef9eb1addaa71ffa181d67b

    • SSDEEP

      12288:8bkFmQkSZkM/JyuzWfCK9micSAOyP/gQh3XjjJHF2JV8NdzxfpB+vmbeTxFwPXKP:8w4+kM/Jyu+77AOywQhHzxfYEeVFwXKP

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks