Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    c0917e82f5e31061463f715fec8e34eb95739deff8486f1de2cc6b2b389af3b4

  • Size

    13.3MB

  • Sample

    240908-q2exvaygqr

  • MD5

    c2619b07154f9fb5e79683f47e96b51f

  • SHA1

    8c66cc5f4bce3ea496a6c3d827977f41f5ed7b0c

  • SHA256

    c0917e82f5e31061463f715fec8e34eb95739deff8486f1de2cc6b2b389af3b4

  • SHA512

    5588a84b3afb1db03fc83afb27cfb3679d0b21cf317f2242475352588152a9d5f3b6fe1980db0f9c6e24fbd35cec13a18483318ba2df033b4c48ddeb25248568

  • SSDEEP

    393216:UCE5o9NHcBWeFXOlRj/wTNHcBWeFXOlRjaUuVSh0c:UCEGeWeFXOfVWeFXOfarVnc

Malware Config

Targets

    • Target

      c0917e82f5e31061463f715fec8e34eb95739deff8486f1de2cc6b2b389af3b4

    • Size

      13.3MB

    • MD5

      c2619b07154f9fb5e79683f47e96b51f

    • SHA1

      8c66cc5f4bce3ea496a6c3d827977f41f5ed7b0c

    • SHA256

      c0917e82f5e31061463f715fec8e34eb95739deff8486f1de2cc6b2b389af3b4

    • SHA512

      5588a84b3afb1db03fc83afb27cfb3679d0b21cf317f2242475352588152a9d5f3b6fe1980db0f9c6e24fbd35cec13a18483318ba2df033b4c48ddeb25248568

    • SSDEEP

      393216:UCE5o9NHcBWeFXOlRj/wTNHcBWeFXOlRjaUuVSh0c:UCEGeWeFXOfVWeFXOfarVnc

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks