Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2508-31-0x...ry.exe

windows7-x64

1

2508-31-0x...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2508-31-0x0000000000400000-0x00000000004A2000-memory.dmp

  • Size

    648KB

  • Sample

    240806-t6t44stgnq

  • MD5

    9ab49fbd3f2c4cc188deea6f9b76d2f0

  • SHA1

    b32f62d8c7ca908de09c8339b5074a26c56362d3

  • SHA256

    641515a4cc459e07e0156ac0993fe1542b89238b854f560e7ee2a9ece458b64b

  • SHA512

    5a6ceb342b486ee58759192178458b4784ddd17b654a821485dd3f073f270be479cd23a9829cadd31bb73c265b538688f694a4a2baa4971129d4afa7cb8ae138

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqjIzmd:nSHIG6mQwGmfOQd8YhY0/E+UG

Score
10/10
lokibotdiscovery

Malware Config

Extracted

Family

lokibot

C2

http://sempersim.su/d1/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Targets

    • Target

      2508-31-0x0000000000400000-0x00000000004A2000-memory.dmp

    • Size

      648KB

    • MD5

      9ab49fbd3f2c4cc188deea6f9b76d2f0

    • SHA1

      b32f62d8c7ca908de09c8339b5074a26c56362d3

    • SHA256

      641515a4cc459e07e0156ac0993fe1542b89238b854f560e7ee2a9ece458b64b

    • SHA512

      5a6ceb342b486ee58759192178458b4784ddd17b654a821485dd3f073f270be479cd23a9829cadd31bb73c265b538688f694a4a2baa4971129d4afa7cb8ae138

    • SSDEEP

      1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqjIzmd:nSHIG6mQwGmfOQd8YhY0/E+UG

    Score
    3/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks