Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-01-06...id.exe

windows7-x64

10

2024-01-06...id.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-06_d9770c9d89682c53e664786d2dcaa048_hacktools_icedid

  • Size

    4.7MB

  • Sample

    240107-pf52gafhg8

  • MD5

    d9770c9d89682c53e664786d2dcaa048

  • SHA1

    168173c8c3b1ead2447519116edeb127f875008f

  • SHA256

    93e5c405c3a75cee3ac368c026d5ae9bbd4c9c5be91a95e7c234e4c814c72654

  • SHA512

    0c1cfc15a2ec13f39a3a2d8277d28ea5444a8593778b6e401027eb9ab4e562f2bf5399a69bcd5a672d7416e01929fb5f6fdf6c8afd11527c50838ed50b4af8d8

  • SSDEEP

    49152:HMwN00ppnsoBTKtKXzdFo8hnK6xPLeBsVu9Cdca7t47FUHhKbieBHuzZ/S9fJpiU:swN9V/TKWfxlcsAAd9OOk2WCZ/kjouL

Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target

      2024-01-06_d9770c9d89682c53e664786d2dcaa048_hacktools_icedid

    • Size

      4.7MB

    • MD5

      d9770c9d89682c53e664786d2dcaa048

    • SHA1

      168173c8c3b1ead2447519116edeb127f875008f

    • SHA256

      93e5c405c3a75cee3ac368c026d5ae9bbd4c9c5be91a95e7c234e4c814c72654

    • SHA512

      0c1cfc15a2ec13f39a3a2d8277d28ea5444a8593778b6e401027eb9ab4e562f2bf5399a69bcd5a672d7416e01929fb5f6fdf6c8afd11527c50838ed50b4af8d8

    • SSDEEP

      49152:HMwN00ppnsoBTKtKXzdFo8hnK6xPLeBsVu9Cdca7t47FUHhKbieBHuzZ/S9fJpiU:swN9V/TKWfxlcsAAd9OOk2WCZ/kjouL

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks