Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2025-03-21_d44dde23adf8b719b299c0d0541d5676_amadey_hacktools_mimikatz_rhadamanthys_smoke-loader
-
Size
12.3MB
-
Sample
250321-jzl5tayqz8
-
MD5
d44dde23adf8b719b299c0d0541d5676
-
SHA1
83320720aad1e6871a97cc55a0ec51f05f246bfa
-
SHA256
b394e8102efa9dcfbfacf4b2c442decaf93657223537bc61fbf141822077ded2
-
SHA512
fe991a73a23b13ff396f86f95cc75a154be42171144d56f2aefa9c3ce8abdaebbeb2f583bb1520e5cc8d20d66ce24305692d63fc07b6e2fd8571842a8649c5d8
-
SSDEEP
196608:o3XTYQmknGzwHaOtVPHd9swFBubKLtchEYX2AxFpx4g1JoHZiDzDhpyT4t2:4ujzwV3BubKyeapug7ciDzDhpyTv
Malware Config
Targets
-
-
Target
2025-03-21_d44dde23adf8b719b299c0d0541d5676_amadey_hacktools_mimikatz_rhadamanthys_smoke-loader
-
Size
12.3MB
-
MD5
d44dde23adf8b719b299c0d0541d5676
-
SHA1
83320720aad1e6871a97cc55a0ec51f05f246bfa
-
SHA256
b394e8102efa9dcfbfacf4b2c442decaf93657223537bc61fbf141822077ded2
-
SHA512
fe991a73a23b13ff396f86f95cc75a154be42171144d56f2aefa9c3ce8abdaebbeb2f583bb1520e5cc8d20d66ce24305692d63fc07b6e2fd8571842a8649c5d8
-
SSDEEP
196608:o3XTYQmknGzwHaOtVPHd9swFBubKLtchEYX2AxFpx4g1JoHZiDzDhpyT4t2:4ujzwV3BubKyeapug7ciDzDhpyTv
Score10/10-
Blackmoon family
-
Blackmoon, KrBanker
Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
-
Detect Blackmoon payload
-
Mimikatz
mimikatz is an open source tool to dump credentials on Windows.
-
Mimikatz family
-
mimikatz is an open source tool to dump credentials on Windows
-
Executes dropped EXE
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-