Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2025-03-21_d1170c53f980018cd047396765218e88_hacktools_icedid_remcos_rhadamanthys

  • Size

    4.7MB

  • Sample

    250321-jzcalsyqz5

  • MD5

    d1170c53f980018cd047396765218e88

  • SHA1

    97bcacedb8170ee1bf247096e16478c6d7f97f1c

  • SHA256

    16fc904f2e318ce6d15d00f89922f2416b25855cc74d3c872d14c47eec309711

  • SHA512

    5d42246ade63ab48dc963f673ef078b65886b64fa389f6022c44a9a70112bf7688e77f45147bc10b16a8f954cff5848d1fedeb4cdec43c0f37018c5761f862d7

  • SSDEEP

    98304:DwN9V/TKWfxlcswUr+cIJA0QTJfT+E5/u0:C9V/TZlv/+cP0QTtyL0

Malware Config

Targets

    • Target

      2025-03-21_d1170c53f980018cd047396765218e88_hacktools_icedid_remcos_rhadamanthys

    • Size

      4.7MB

    • MD5

      d1170c53f980018cd047396765218e88

    • SHA1

      97bcacedb8170ee1bf247096e16478c6d7f97f1c

    • SHA256

      16fc904f2e318ce6d15d00f89922f2416b25855cc74d3c872d14c47eec309711

    • SHA512

      5d42246ade63ab48dc963f673ef078b65886b64fa389f6022c44a9a70112bf7688e77f45147bc10b16a8f954cff5848d1fedeb4cdec43c0f37018c5761f862d7

    • SSDEEP

      98304:DwN9V/TKWfxlcswUr+cIJA0QTJfT+E5/u0:C9V/TZlv/+cP0QTtyL0

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks