Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

causativenesszb.exe

windows7-x64

10

causativenesszb.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    01/06/2024, 19:33

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    causativenesszb.exe

  • Size

    181KB

  • MD5

    0d9f4b56d3f36373f8bf26e8107100b0

  • SHA1

    8516094991d5fe0a4c2cec90e9f54833f1d0a326

  • SHA256

    a6b5435b16903b2c557210a813fdfacc9d4b965d01b05a46a3d2b6c353719e05

  • SHA512

    a313b0219d5248f9995f3b2f70bf30e8e9cf528659e98a4cb53b3ffdc80d1b0c9ee03cc3bc6d3bed36d31801506200a1188c849f551d401b725bd009f6e91c20

  • SSDEEP

    3072:3CmlA+2TGMF85+bkRG32foUP9GmPe97UoSs1urv9zHKipsK/huffqeNntqpKRnHV:SmlV4h8JG3QUzSOwzH6K/hC9tqp6HhNZ

Score
10/10
koiloaderloader

Malware Config

Extracted

Family

koiloader

C2

http://195.123.224.66/marasmus.php

Attributes
  • payload_url

    https://www.dsestimation.com/wp-content/uploads/2015/10

Signatures

  • KoiLoader

    KoiLoader is a malware loader written in C++.

    loaderkoiloader
  • Detects KoiLoader payload 1 IoCs
    loader

Processes

  • C:\Users\Admin\AppData\Local\Temp\causativenesszb.exe
    "C:\Users\Admin\AppData\Local\Temp\causativenesszb.exe"
    1⤵
      PID:108

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/108-0-0x00000000000F0000-0x00000000000FD000-memory.dmp

      Filesize

      52KB

      Download