Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2904-0-0x0...ry.exe

windows7-x64

1

2904-0-0x0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2904-0-0x00000000000F0000-0x00000000000FD000-memory.dmp

  • Size

    52KB

  • MD5

    1eed3f13506572fd9dff208d013f928b

  • SHA1

    dd1922888d640555da356889a74828f9b746b081

  • SHA256

    9285b071f03a309c2daa49ec2fdca7eacffa40231a52e6560c34d60c9b7e35fb

  • SHA512

    d9d04f9d86594a76fead286ea2ac697b56e4cdaf95f76ae19fc5100d5dae4a3e535ba6ccbbd7dbb6df63d1e0c0c45594e2056bfaedde4c8bd96fe14264db3dec

  • SSDEEP

    768:T/Oc6W91ca/FGsbNfnJUGach9WWEskV59UhV08K1qnjiaqFD+4:TR6G1caDbNfn0ch9iV56ZK2Iw

Score
10/10
loaderkoiloader

Malware Config

Extracted

Family

koiloader

C2

http://79.124.78.45/hockamore.php

Signatures

  • Detects KoiLoader payload 1 IoCs
    loader
  • Koiloader family
    koiloader
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2904-0-0x00000000000F0000-0x00000000000FD000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections