Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-09-09_44e0f9b190c80d0658a552161eded25e_hacktools_hijackloader_icedid

  • Size

    7.1MB

  • Sample

    240909-2qgsvathpj

  • MD5

    44e0f9b190c80d0658a552161eded25e

  • SHA1

    ac9c24fb8897fde7b0f2ff6cb76a509dc74ff75c

  • SHA256

    1662c5778e9f82f49750e78b54bf0d275f7fbb214bba32567148ed7ab30f6384

  • SHA512

    e962710d1d9a7bc24e4d7720899da72534d1a9f93589f8769c99ba3a36d839079a99e1bb28ce000cd173573eadf63afd841554a5ca23cf67896fc5780d5a6104

  • SSDEEP

    98304:+8rdisa+yK1KepweAAvAF6RKf91PM+yEHN6SiLKwESgjMxSm:PBcK1Ke6eKkKf9m+yEt6SiLKXSR1

Malware Config

Targets

    • Target

      2024-09-09_44e0f9b190c80d0658a552161eded25e_hacktools_hijackloader_icedid

    • Size

      7.1MB

    • MD5

      44e0f9b190c80d0658a552161eded25e

    • SHA1

      ac9c24fb8897fde7b0f2ff6cb76a509dc74ff75c

    • SHA256

      1662c5778e9f82f49750e78b54bf0d275f7fbb214bba32567148ed7ab30f6384

    • SHA512

      e962710d1d9a7bc24e4d7720899da72534d1a9f93589f8769c99ba3a36d839079a99e1bb28ce000cd173573eadf63afd841554a5ca23cf67896fc5780d5a6104

    • SSDEEP

      98304:+8rdisa+yK1KepweAAvAF6RKf91PM+yEHN6SiLKwESgjMxSm:PBcK1Ke6eKkKf9m+yEt6SiLKXSR1

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks