Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

b743656146...a6.dll

windows7-x64

10

b743656146...a6.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b743656146b1200bd138fc39e13595620a9d283736a17d4447c6126cbe247aa6

  • Size

    694KB

  • Sample

    221203-yae3jadc3w

  • MD5

    09cdd279fa2e745dd0ed10da4306e1d0

  • SHA1

    c3b69211ba2ebc3a7b0d9d05cfbd47ffa47f7fa6

  • SHA256

    b743656146b1200bd138fc39e13595620a9d283736a17d4447c6126cbe247aa6

  • SHA512

    8a5d2b63c2d79b8274c76bb64ff4adb03d310ea9094813989583b6eff361f86d05d66424dfe0862bab9955655f28be3d599ad679524dff9f8740c15514a01c8f

  • SSDEEP

    12288:8EBx2PuZwxfFaCLkSAf6fB8IvGbPXyFdErxBpM+p81z1z53xsdL4v:8EmPuZQZI4BmbPC7Efprp81z11

Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target

      b743656146b1200bd138fc39e13595620a9d283736a17d4447c6126cbe247aa6

    • Size

      694KB

    • MD5

      09cdd279fa2e745dd0ed10da4306e1d0

    • SHA1

      c3b69211ba2ebc3a7b0d9d05cfbd47ffa47f7fa6

    • SHA256

      b743656146b1200bd138fc39e13595620a9d283736a17d4447c6126cbe247aa6

    • SHA512

      8a5d2b63c2d79b8274c76bb64ff4adb03d310ea9094813989583b6eff361f86d05d66424dfe0862bab9955655f28be3d599ad679524dff9f8740c15514a01c8f

    • SSDEEP

      12288:8EBx2PuZwxfFaCLkSAf6fB8IvGbPXyFdErxBpM+p81z1z53xsdL4v:8EmPuZQZI4BmbPC7Efprp81z11

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks