Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

8

ddce74347d...0d.exe

windows7-x64

10

ddce74347d...0d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ddce74347d53f88c83beaeb75991284c9fca6dbfe90e3839774256f74909fd0d

  • Size

    74KB

  • Sample

    221107-gbnydsdbeq

  • MD5

    13015d8663a6504d2e772c5f9c47bb30

  • SHA1

    9b981d550564494fe2d7274475cb6e71390178a0

  • SHA256

    ddce74347d53f88c83beaeb75991284c9fca6dbfe90e3839774256f74909fd0d

  • SHA512

    3ec821ccdd19420c5dd63d6a7c9607e45a4e80a7536cf21bd8da0799f66e638cbd38b6420ebc485a4408f90fda281f33b33a7e45c6a0b1d48b4ef61d6604c1b0

  • SSDEEP

    1536:0vQBeOGtrYS3srx93UBWfwC6Ggnouy8CUYj7FHVNK+tRlBkRU7:0hOmTsF93UYfwC6GIoutXwjPRlBk4

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      ddce74347d53f88c83beaeb75991284c9fca6dbfe90e3839774256f74909fd0d

    • Size

      74KB

    • MD5

      13015d8663a6504d2e772c5f9c47bb30

    • SHA1

      9b981d550564494fe2d7274475cb6e71390178a0

    • SHA256

      ddce74347d53f88c83beaeb75991284c9fca6dbfe90e3839774256f74909fd0d

    • SHA512

      3ec821ccdd19420c5dd63d6a7c9607e45a4e80a7536cf21bd8da0799f66e638cbd38b6420ebc485a4408f90fda281f33b33a7e45c6a0b1d48b4ef61d6604c1b0

    • SSDEEP

      1536:0vQBeOGtrYS3srx93UBWfwC6Ggnouy8CUYj7FHVNK+tRlBkRU7:0hOmTsF93UYfwC6GIoutXwjPRlBk4

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks