Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2228-0-0x0...ry.exe

windows7-x64

1

2228-0-0x0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2228-0-0x00000000000F0000-0x00000000000FD000-memory.dmp

  • Size

    52KB

  • Sample

    241111-3m5k6sspcr

  • MD5

    ceaf9e700cc06c823cb269c9f5d691c8

  • SHA1

    4344570c596008864cde767364b4bc436db682bd

  • SHA256

    b01b0d260f3fd1184abbc306dbeb8ee5101880e5aafb6d1a2a4c664942df53e9

  • SHA512

    8f8734a9ab5a8c7d8da2fc6ad555d07ad49381c4c3c0537e6bd0e6522bc5f4111cb074a722aa3c0d76a9c2103ecbfd562b81f40a939c1ec4b076b1616b4be5b0

  • SSDEEP

    768:6TOI/KihMhjIHpdfWsJNvg3vqu1+h9oya/b06T9Fb+VYbet5afKXTj:6N/KptIH1JNvgD1+h9mbl9FvbcaATj

Score
10/10
koiloaderdiscoveryloader

Malware Config

Extracted

Family

koiloader

C2

http://193.31.41.56/take.php

Attributes
  • payload_url

    https://calicorieti.it/wp-content/uploads/2023/07

Targets

    • Target

      2228-0-0x00000000000F0000-0x00000000000FD000-memory.dmp

    • Size

      52KB

    • MD5

      ceaf9e700cc06c823cb269c9f5d691c8

    • SHA1

      4344570c596008864cde767364b4bc436db682bd

    • SHA256

      b01b0d260f3fd1184abbc306dbeb8ee5101880e5aafb6d1a2a4c664942df53e9

    • SHA512

      8f8734a9ab5a8c7d8da2fc6ad555d07ad49381c4c3c0537e6bd0e6522bc5f4111cb074a722aa3c0d76a9c2103ecbfd562b81f40a939c1ec4b076b1616b4be5b0

    • SSDEEP

      768:6TOI/KihMhjIHpdfWsJNvg3vqu1+h9oya/b06T9Fb+VYbet5afKXTj:6N/KptIH1JNvgD1+h9mbl9FvbcaATj

    Score
    3/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks