Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
22/12/2024, 05:11
General
-
Target
0872edce0b58e8459655a1850440e75ed91ba69f5a46ed1f9b05d0b0c41c4de2N.exe
-
Size
263KB
-
MD5
d656d7b8bd105d329e2b647b2d1a05e0
-
SHA1
e1560fbd597415e55eb49079e155f688508aec12
-
SHA256
0872edce0b58e8459655a1850440e75ed91ba69f5a46ed1f9b05d0b0c41c4de2
-
SHA512
cc08436c1903607cd11de77682b96e6f949b448a5540644e1d5e00fc52b6bf9873bbba898e9f08cd9f37d56c8018b95129655e91340703c24a096e5d3e112b8f
-
SSDEEP
6144:mxywrLKUAMhE790uaVpZkheoSRlzJSq6n:mbrERHaroSXzoq
Malware Config
Signatures
-
Blackmoon family
-
Blackmoon, KrBanker
Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
-
Detect Blackmoon payload 1 IoCs
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\0872edce0b58e8459655a1850440e75ed91ba69f5a46ed1f9b05d0b0c41c4de2N.exe"C:\Users\Admin\AppData\Local\Temp\0872edce0b58e8459655a1850440e75ed91ba69f5a46ed1f9b05d0b0c41c4de2N.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
964KB
-
Filesize
964KB