Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    74ee8f4094db4ea89296c81352a734bd428da4ee4156b1b23ce4fcb10af77500

  • Size

    12.9MB

  • Sample

    240915-kemraavenj

  • MD5

    94ef8f16e591a76c7ea12782c65b2d05

  • SHA1

    048f8aa1224513d6c20fec2ed34aebdd0350f5a3

  • SHA256

    74ee8f4094db4ea89296c81352a734bd428da4ee4156b1b23ce4fcb10af77500

  • SHA512

    723c3e2221c3c31d138837e42b9f2ce9277646c9b198b5bbb0997e79a847b6ab8a0243c37bd078a4f9945ddc716f3616c87abc85ad1eeaf0f2598f5b51f768c9

  • SSDEEP

    196608:jEafli2XykeihBWeFXy+IFTYMjcuNwYli2XykeihBWeFXy+IFTYMjcuU/X8+P:yNHcBWeFXOlRj/wTNHcBWeFXOlRj/UF

Malware Config

Targets

    • Target

      74ee8f4094db4ea89296c81352a734bd428da4ee4156b1b23ce4fcb10af77500

    • Size

      12.9MB

    • MD5

      94ef8f16e591a76c7ea12782c65b2d05

    • SHA1

      048f8aa1224513d6c20fec2ed34aebdd0350f5a3

    • SHA256

      74ee8f4094db4ea89296c81352a734bd428da4ee4156b1b23ce4fcb10af77500

    • SHA512

      723c3e2221c3c31d138837e42b9f2ce9277646c9b198b5bbb0997e79a847b6ab8a0243c37bd078a4f9945ddc716f3616c87abc85ad1eeaf0f2598f5b51f768c9

    • SSDEEP

      196608:jEafli2XykeihBWeFXy+IFTYMjcuNwYli2XykeihBWeFXy+IFTYMjcuU/X8+P:yNHcBWeFXOlRj/wTNHcBWeFXOlRj/UF

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks