Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2692-31-0x...ry.exe

windows7-x64

1

2692-31-0x...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2692-31-0x0000000000400000-0x00000000004A2000-memory.dmp

  • Size

    648KB

  • MD5

    397b34fd47c8e6d56433d17d81bc0fde

  • SHA1

    34772de12fd7724fb1676c7e10c655ae463d7010

  • SHA256

    a973d368d2dfe1a0ef70c5564519b1d7b793d292faa322ac5ee41e2079d1b337

  • SHA512

    561e0ed9380371482dabedfa1033aa74e5763bc7793bca86354bd9a07070cee00335ab95b089e41e0b1e94e35df15b848b3bab8b4f66372292067f1f1eedd9a6

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqiIzmd:nSHIG6mQwGmfOQd8YhY0/EbUG

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://168.100.10.152/index.php/7953330748856

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

  • Lokibot family
    lokibot
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2692-31-0x0000000000400000-0x00000000004A2000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections