Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
2s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
21/07/2024, 07:09
Static task
static1
Behavioral task
behavioral1
Sample
023af2de696de62a4424c48d203ddb721422c9629b43809d5f90f9c6da4fea9e.exe
Resource
win7-20240705-en
5 signatures
150 seconds
General
-
Target
023af2de696de62a4424c48d203ddb721422c9629b43809d5f90f9c6da4fea9e.exe
-
Size
88.4MB
-
MD5
6fc6d0151b894c6edb99a13677f64b7d
-
SHA1
29e643902e9e2a78eb45bb7668771b8ad81a85cf
-
SHA256
023af2de696de62a4424c48d203ddb721422c9629b43809d5f90f9c6da4fea9e
-
SHA512
0cc9c7e87e5c018f6e9c33a1605d5ffe9383f25c301bf1f802d470f5b1480fa42b5ae812c63307d002da6468a2c840a940eb5a3b92fee6b65c5b932c8e77d82b
-
SSDEEP
1572864:cdOzxAzZz4816LdTqUEg//kBnAzZz4816LdTqUEg//kBnAzZz4816LdTqUEg//kO:wpzZtCogHkBAzZtCogHkBAzZtCogHkBQ
Malware Config
Signatures
-
Detect Blackmoon payload 2 IoCs
resource yara_rule behavioral2/memory/1908-1-0x0000000010000000-0x0000000010246000-memory.dmp family_blackmoon behavioral2/memory/1908-1-0x0000000010000000-0x0000000010246000-memory.dmp family_blackmoon