Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2904-0-0x0...ry.exe

windows7-x64

1

2904-0-0x0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2904-0-0x00000000000F0000-0x00000000000FD000-memory.dmp

  • Size

    52KB

  • Sample

    241209-sw9ldasldv

  • MD5

    1eed3f13506572fd9dff208d013f928b

  • SHA1

    dd1922888d640555da356889a74828f9b746b081

  • SHA256

    9285b071f03a309c2daa49ec2fdca7eacffa40231a52e6560c34d60c9b7e35fb

  • SHA512

    d9d04f9d86594a76fead286ea2ac697b56e4cdaf95f76ae19fc5100d5dae4a3e535ba6ccbbd7dbb6df63d1e0c0c45594e2056bfaedde4c8bd96fe14264db3dec

  • SSDEEP

    768:T/Oc6W91ca/FGsbNfnJUGach9WWEskV59UhV08K1qnjiaqFD+4:TR6G1caDbNfn0ch9iV56ZK2Iw

Score
10/10
koiloaderdiscoveryloader

Malware Config

Extracted

Family

koiloader

C2

http://79.124.78.45/hockamore.php

Targets

    • Target

      2904-0-0x00000000000F0000-0x00000000000FD000-memory.dmp

    • Size

      52KB

    • MD5

      1eed3f13506572fd9dff208d013f928b

    • SHA1

      dd1922888d640555da356889a74828f9b746b081

    • SHA256

      9285b071f03a309c2daa49ec2fdca7eacffa40231a52e6560c34d60c9b7e35fb

    • SHA512

      d9d04f9d86594a76fead286ea2ac697b56e4cdaf95f76ae19fc5100d5dae4a3e535ba6ccbbd7dbb6df63d1e0c0c45594e2056bfaedde4c8bd96fe14264db3dec

    • SSDEEP

      768:T/Oc6W91ca/FGsbNfnJUGach9WWEskV59UhV08K1qnjiaqFD+4:TR6G1caDbNfn0ch9iV56ZK2Iw

    Score
    3/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks