Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

dd18a1d8ca...74.exe

windows7-x64

10

dd18a1d8ca...74.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dd18a1d8ca564d328028dba83639ba10ae2390dd9a8465e1482a44b3e42ba574

  • Size

    4.7MB

  • Sample

    231014-k32kcade56

  • MD5

    f6f300c7ae7da288edb40174a5fdcdc5

  • SHA1

    74fcd8fe20b0946d478524aa913b8956b7cd5a53

  • SHA256

    dd18a1d8ca564d328028dba83639ba10ae2390dd9a8465e1482a44b3e42ba574

  • SHA512

    d90773f887ce778364fd554909cb8008ed5d25f210b968cd28492b058dcbfd3074cafe4eb34c43fb7756c71e38371302b68651599226cb1d4dbabed31bfc1ae3

  • SSDEEP

    98304:n/Un5TJ5yNivnBYXhXuYQiSDMd+DqSooc3Lcv7H:s5TJMSqXhXuYrd+DqSxcbcv7

Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target

      dd18a1d8ca564d328028dba83639ba10ae2390dd9a8465e1482a44b3e42ba574

    • Size

      4.7MB

    • MD5

      f6f300c7ae7da288edb40174a5fdcdc5

    • SHA1

      74fcd8fe20b0946d478524aa913b8956b7cd5a53

    • SHA256

      dd18a1d8ca564d328028dba83639ba10ae2390dd9a8465e1482a44b3e42ba574

    • SHA512

      d90773f887ce778364fd554909cb8008ed5d25f210b968cd28492b058dcbfd3074cafe4eb34c43fb7756c71e38371302b68651599226cb1d4dbabed31bfc1ae3

    • SSDEEP

      98304:n/Un5TJ5yNivnBYXhXuYQiSDMd+DqSooc3Lcv7H:s5TJMSqXhXuYrd+DqSxcbcv7

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks