Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JC_2ea3e072c2d78ce865f405b70490985bd2475f57320c588aeb504c2778579ce5

  • Size

    189KB

  • Sample

    230902-mxj48aca71

  • MD5

    f4dd38add96e041efe1f84101843c2ff

  • SHA1

    e2eaac1bf99a00679da28f10eb92379ebaadbf2b

  • SHA256

    2ea3e072c2d78ce865f405b70490985bd2475f57320c588aeb504c2778579ce5

  • SHA512

    645c3cd83b59af44e6344e8d6420b963cb7fe5b8da9f921ad1f9b2c5498d2d1d211abc4c6e0a60365399543109cfcc2f77a4372a9131e54d9ee63f21382584a2

  • SSDEEP

    3072:OUcxp2iqKaW9ypLsjB8rgPNlC3nZ60qg65oIsulYljpapqgfOg0qG:OnaQY70oZ6Fg65Iuek3fR

Malware Config

Targets

    • Target

      JC_2ea3e072c2d78ce865f405b70490985bd2475f57320c588aeb504c2778579ce5

    • Size

      189KB

    • MD5

      f4dd38add96e041efe1f84101843c2ff

    • SHA1

      e2eaac1bf99a00679da28f10eb92379ebaadbf2b

    • SHA256

      2ea3e072c2d78ce865f405b70490985bd2475f57320c588aeb504c2778579ce5

    • SHA512

      645c3cd83b59af44e6344e8d6420b963cb7fe5b8da9f921ad1f9b2c5498d2d1d211abc4c6e0a60365399543109cfcc2f77a4372a9131e54d9ee63f21382584a2

    • SSDEEP

      3072:OUcxp2iqKaW9ypLsjB8rgPNlC3nZ60qg65oIsulYljpapqgfOg0qG:OnaQY70oZ6Fg65Iuek3fR

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

MITRE ATT&CK Enterprise v15

Tasks