Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2228-0-0x0...ry.exe

windows7-x64

1

2228-0-0x0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2228-0-0x00000000000F0000-0x00000000000FD000-memory.dmp

  • Size

    52KB

  • MD5

    ceaf9e700cc06c823cb269c9f5d691c8

  • SHA1

    4344570c596008864cde767364b4bc436db682bd

  • SHA256

    b01b0d260f3fd1184abbc306dbeb8ee5101880e5aafb6d1a2a4c664942df53e9

  • SHA512

    8f8734a9ab5a8c7d8da2fc6ad555d07ad49381c4c3c0537e6bd0e6522bc5f4111cb074a722aa3c0d76a9c2103ecbfd562b81f40a939c1ec4b076b1616b4be5b0

  • SSDEEP

    768:6TOI/KihMhjIHpdfWsJNvg3vqu1+h9oya/b06T9Fb+VYbet5afKXTj:6N/KptIH1JNvgD1+h9mbl9FvbcaATj

Score
10/10
loaderkoiloader

Malware Config

Extracted

Family

koiloader

C2

http://193.31.41.56/take.php

Attributes
  • payload_url

    https://calicorieti.it/wp-content/uploads/2023/07

Signatures

  • Detects KoiLoader payload 1 IoCs
    loader
  • Koiloader family
    koiloader
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2228-0-0x00000000000F0000-0x00000000000FD000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections