Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
143s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
08/10/2023, 20:57
General
-
Target
2c408764d36b4e234a2abd90c4e3bf71986850dabd21db6e185bc49ceb714a64.exe
-
Size
265KB
-
MD5
76813fa398ecb66c14b98c38b74fac6f
-
SHA1
b7ea332f2c95e78f30b8eb185b1ab535045b6e4b
-
SHA256
2c408764d36b4e234a2abd90c4e3bf71986850dabd21db6e185bc49ceb714a64
-
SHA512
62a5f5d2a545f5f23f637d3cf41de5316ae49ac65ce961e6959478aa3afd413436a9b0ca5465999cea7c0d8c98f82a30af45ce87dfcd99cda8c93c67b3695f97
-
SSDEEP
6144:BCHYI8JFpdeVd3IIShqRm3a2AjcEYEhIU/FO/:BCHIJ6d3VQ3ejcOU
Score
10/10
Malware Config
Signatures
-
Blackmoon, KrBanker
Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
-
Detect Blackmoon payload 6 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2c408764d36b4e234a2abd90c4e3bf71986850dabd21db6e185bc49ceb714a64.exe"C:\Users\Admin\AppData\Local\Temp\2c408764d36b4e234a2abd90c4e3bf71986850dabd21db6e185bc49ceb714a64.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
936KB
-
Filesize
128KB
-
Filesize
960KB
-
Filesize
256KB
-
Filesize
960KB
-
Filesize
936KB
-
Filesize
960KB
-
Filesize
256KB
-
Filesize
128KB