Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
10/01/2024, 09:34
General
-
Target
051a75f91d68a31a77134c030776ee50edc26b8a6e993ab8a06dc2eea8f66ecc.exe
-
Size
10.0MB
-
MD5
3e2e351dcc7ec78da876800db3ffe62c
-
SHA1
fa8b4e6dd410855855175a1fb0b34790ddcaad31
-
SHA256
051a75f91d68a31a77134c030776ee50edc26b8a6e993ab8a06dc2eea8f66ecc
-
SHA512
c2338fcbfb09d5ec546332e08b39977ba9236182582e41467151708258fcbc92865cd5bc75e2f7313d6642e92b4369a4291c4bd619e91e6f2ce6a8ec329683a4
-
SSDEEP
196608:zYnf1sfEKWUGNEoiN/A4scYomKDJdd7slXhM6syktUqtECQ7:Unf1IpGNvcYFKidGdtECQ7
Score
10/10
Malware Config
Signatures
-
Blackmoon, KrBanker
Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
-
Detect Blackmoon payload 6 IoCs
-
Program crash 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\051a75f91d68a31a77134c030776ee50edc26b8a6e993ab8a06dc2eea8f66ecc.exe"C:\Users\Admin\AppData\Local\Temp\051a75f91d68a31a77134c030776ee50edc26b8a6e993ab8a06dc2eea8f66ecc.exe"1⤵
- Suspicious use of SetWindowsHookEx
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2432 -s 9002⤵
- Program crash
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
4KB
-
Filesize
5.2MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
5.2MB