Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-09-09...id.exe

windows7-x64

10

2024-09-09...id.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-09-09_44e0f9b190c80d0658a552161eded25e_hacktools_hijackloader_icedid

  • Size

    7.1MB

  • Sample

    240909-2qgsvathpj

  • MD5

    44e0f9b190c80d0658a552161eded25e

  • SHA1

    ac9c24fb8897fde7b0f2ff6cb76a509dc74ff75c

  • SHA256

    1662c5778e9f82f49750e78b54bf0d275f7fbb214bba32567148ed7ab30f6384

  • SHA512

    e962710d1d9a7bc24e4d7720899da72534d1a9f93589f8769c99ba3a36d839079a99e1bb28ce000cd173573eadf63afd841554a5ca23cf67896fc5780d5a6104

  • SSDEEP

    98304:+8rdisa+yK1KepweAAvAF6RKf91PM+yEHN6SiLKwESgjMxSm:PBcK1Ke6eKkKf9m+yEt6SiLKXSR1

Score
10/10
blackmoonbankerdiscoverytrojanupx

Malware Config

Targets

    • Target

      2024-09-09_44e0f9b190c80d0658a552161eded25e_hacktools_hijackloader_icedid

    • Size

      7.1MB

    • MD5

      44e0f9b190c80d0658a552161eded25e

    • SHA1

      ac9c24fb8897fde7b0f2ff6cb76a509dc74ff75c

    • SHA256

      1662c5778e9f82f49750e78b54bf0d275f7fbb214bba32567148ed7ab30f6384

    • SHA512

      e962710d1d9a7bc24e4d7720899da72534d1a9f93589f8769c99ba3a36d839079a99e1bb28ce000cd173573eadf63afd841554a5ca23cf67896fc5780d5a6104

    • SSDEEP

      98304:+8rdisa+yK1KepweAAvAF6RKf91PM+yEHN6SiLKwESgjMxSm:PBcK1Ke6eKkKf9m+yEt6SiLKXSR1

    Score
    10/10
    blackmoonbankerdiscoverytrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks