Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
165s -
max time network
174s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
12/10/2023, 07:20
General
-
Target
4ba7a935855366db199c9726ecf743eada8b0d30eb8bf5a8288434bc7cdaba5b.exe
-
Size
15.0MB
-
MD5
53895c3c5f0ec633db024c48f09c3a68
-
SHA1
131d891e916a9858550239d1137316273e806e69
-
SHA256
4ba7a935855366db199c9726ecf743eada8b0d30eb8bf5a8288434bc7cdaba5b
-
SHA512
50ec3d05cde56f12dbfddaad6a0ef0e0c6bf83a0a1ae0f42a19decdf5fd7dbe1b45cafd186bb5125aefa4a78e6f0347ec0626b7f04ea905e569f2e54d5f4df46
-
SSDEEP
196608:R0xUQaf+HGcCBXZH2MG/gL+rr7F/Z6fInob2PIzk1OQqp0dVrDhTvoeH:xfTcCmMGIgd/Z6QnobYHqu/rDhTv
Score
10/10
Malware Config
Signatures
-
Blackmoon, KrBanker
Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
-
Detect Blackmoon payload 3 IoCs
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4ba7a935855366db199c9726ecf743eada8b0d30eb8bf5a8288434bc7cdaba5b.exe"C:\Users\Admin\AppData\Local\Temp\4ba7a935855366db199c9726ecf743eada8b0d30eb8bf5a8288434bc7cdaba5b.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
15.5MB
-
Filesize
4KB
-
Filesize
15.5MB
-
Filesize
15.5MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB