Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

a8b6afcf4b...85.exe

windows7-x64

10

a8b6afcf4b...85.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a8b6afcf4b23a235bf9bc0d4bde33a68ead19fbafce3694b3c8ab602c40d5885

  • Size

    176KB

  • Sample

    221011-3rwh3abeb6

  • MD5

    76e0e62f1569576b71d76d83ce4a8aa0

  • SHA1

    13d2ef143ebf3df93344948f59d061589e843e49

  • SHA256

    a8b6afcf4b23a235bf9bc0d4bde33a68ead19fbafce3694b3c8ab602c40d5885

  • SHA512

    8394a7ea5714ff40206930796fc35957293b46fb0a03915accb11b6df757a5e1350dfff1ead094cdc1a0ef508f2b61772e7c6d71197eb54cb6ef038956ea07fd

  • SSDEEP

    768:xH/nnbwsrpEFEuo2GP+faFwv2+8ajKGNGa/DrX0s42nDhej1H:xfMomU2O+faFwjHDDbHnFkH

Score
10/10
blackmoonbankerpersistencetrojan

Malware Config

Targets

    • Target

      a8b6afcf4b23a235bf9bc0d4bde33a68ead19fbafce3694b3c8ab602c40d5885

    • Size

      176KB

    • MD5

      76e0e62f1569576b71d76d83ce4a8aa0

    • SHA1

      13d2ef143ebf3df93344948f59d061589e843e49

    • SHA256

      a8b6afcf4b23a235bf9bc0d4bde33a68ead19fbafce3694b3c8ab602c40d5885

    • SHA512

      8394a7ea5714ff40206930796fc35957293b46fb0a03915accb11b6df757a5e1350dfff1ead094cdc1a0ef508f2b61772e7c6d71197eb54cb6ef038956ea07fd

    • SSDEEP

      768:xH/nnbwsrpEFEuo2GP+faFwv2+8ajKGNGa/DrX0s42nDhej1H:xfMomU2O+faFwjHDDbHnFkH

    Score
    10/10
    blackmoonbankerpersistencetrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Deletes itself

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks