Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

bosquetsc8I.exe

windows7-x64

10

bosquetsc8I.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    14/03/2025, 19:36

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    bosquetsc8I.exe

  • Size

    231KB

  • MD5

    f7fe21cd285b686affbc25f02d27defb

  • SHA1

    480cef24792f0d4f89dfec1d6ed2a34a52b22323

  • SHA256

    56d7b3987eb24356b76ab2c96a1ee36ac45f2911e4a1d79da40cdc7c46b1fadc

  • SHA512

    ac0d68f4e62715b56a4e195ca5fe4c6f2cfb3a5d80b99802cbe95484d1c53a6934a26fc73efcc709f1ca5f018e5a4b17cd26717fe76c267846b9b50a34e781f7

  • SSDEEP

    6144:/UhAoAZoLmDXnq7umHH5MgWA6mpVbGpUdXMoM2Cv:/UhCPOrdCv

Score
10/10
koiloaderdiscoveryloader

Malware Config

Extracted

Family

koiloader

C2

http://185.195.236.50/laud.php

Attributes
  • payload_url

    https://deperoclub.com/wp-content/uploads/2023/09

Signatures

  • KoiLoader

    KoiLoader is a malware loader written in C++.

    loaderkoiloader
  • Koiloader family
    koiloader
  • Detects KoiLoader payload 1 IoCs
    loader
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery

Processes

  • C:\Users\Admin\AppData\Local\Temp\bosquetsc8I.exe
    "C:\Users\Admin\AppData\Local\Temp\bosquetsc8I.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2152

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2152-0-0x0000000000080000-0x000000000008D000-memory.dmp

    Filesize

    52KB

    Download