Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-05-30...id.exe

windows7-x64

10

2024-05-30...id.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-30_8beb6e8902a9cdc119d58a0fb94b1d3c_icedid

  • Size

    1.5MB

  • Sample

    240530-xwr4jsgd5x

  • MD5

    8beb6e8902a9cdc119d58a0fb94b1d3c

  • SHA1

    5fe78eb9fea0b94d2510ee28fea653d1f477bed7

  • SHA256

    2fed663d5100094b2de550aad4937e18e2096e55fe7424616736b94b7435d04f

  • SHA512

    844e56d7a9423850a86fde7d7dc3fab82426d07a15775765cd62218153be94e683d5fe463645ea42a96c5786f22b7f3f707db86244176a3773c43b39f06ad26a

  • SSDEEP

    24576:0++ZwJfwCI8Ddfs/kMUftLGZ98FlE6wI+gfnlRIfaE3JRd5:01/kjtPlERDGnlRANRd5

Score
10/10
blackmoonbankerdiscoverytrojan

Malware Config

Targets

    • Target

      2024-05-30_8beb6e8902a9cdc119d58a0fb94b1d3c_icedid

    • Size

      1.5MB

    • MD5

      8beb6e8902a9cdc119d58a0fb94b1d3c

    • SHA1

      5fe78eb9fea0b94d2510ee28fea653d1f477bed7

    • SHA256

      2fed663d5100094b2de550aad4937e18e2096e55fe7424616736b94b7435d04f

    • SHA512

      844e56d7a9423850a86fde7d7dc3fab82426d07a15775765cd62218153be94e683d5fe463645ea42a96c5786f22b7f3f707db86244176a3773c43b39f06ad26a

    • SSDEEP

      24576:0++ZwJfwCI8Ddfs/kMUftLGZ98FlE6wI+gfnlRIfaE3JRd5:01/kjtPlERDGnlRANRd5

    Score
    10/10
    blackmoonbankerdiscoverytrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks