Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    60a57ed2becb72c57c00de8ec810eef2d948fcf72c8a4e84dfa9364286ccce98

  • Size

    1.9MB

  • Sample

    231008-kcq1xsag9v

  • MD5

    d0e343541a4de59af20e512b9a31deda

  • SHA1

    534c89486fdd1ef1a30d5e01b4b5e4e159462405

  • SHA256

    60a57ed2becb72c57c00de8ec810eef2d948fcf72c8a4e84dfa9364286ccce98

  • SHA512

    748e7a6e18416fe5d37c140479e26f156e43200297600cce97970d909b954e4ae4751326d67d2d1decdc144ef6242bdd34971b2b72f0597981354e856efe6ee4

  • SSDEEP

    49152:rGZ6AR0vIkbpHDZk3nMWLcHphCZ3YLq+WLLP:SZ6/wkbtS3nZaTM3YLLWL

Malware Config

Targets

    • Target

      60a57ed2becb72c57c00de8ec810eef2d948fcf72c8a4e84dfa9364286ccce98

    • Size

      1.9MB

    • MD5

      d0e343541a4de59af20e512b9a31deda

    • SHA1

      534c89486fdd1ef1a30d5e01b4b5e4e159462405

    • SHA256

      60a57ed2becb72c57c00de8ec810eef2d948fcf72c8a4e84dfa9364286ccce98

    • SHA512

      748e7a6e18416fe5d37c140479e26f156e43200297600cce97970d909b954e4ae4751326d67d2d1decdc144ef6242bdd34971b2b72f0597981354e856efe6ee4

    • SSDEEP

      49152:rGZ6AR0vIkbpHDZk3nMWLcHphCZ3YLq+WLLP:SZ6/wkbtS3nZaTM3YLLWL

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • UAC bypass

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks