Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.1abe011d0ce56053b1d61cab5a98b2e0.exe

  • Size

    113KB

  • Sample

    231013-yg2vwaee9y

  • MD5

    1abe011d0ce56053b1d61cab5a98b2e0

  • SHA1

    9d8d00134dd811d78b55bd985f55a7a6555978bb

  • SHA256

    4268265365360b20ab52de6762a5724802fd185ac3c4a06c68ca87c8adecb459

  • SHA512

    c65f0c3d7be2b3f9446c7e7cb569392e9fea2970685eb6f9b7f81991b3342e8d9482021fe3925503e63d60ae1dbdab6d9567332bd9faa1036bd13f35e2d76f2d

  • SSDEEP

    3072:chOmTsF93UYfwC6GIout5pi8rY9AABa1AlWn2wpD:ccm4FmowdHoS5ddW3W2wp

Malware Config

Targets

    • Target

      NEAS.1abe011d0ce56053b1d61cab5a98b2e0.exe

    • Size

      113KB

    • MD5

      1abe011d0ce56053b1d61cab5a98b2e0

    • SHA1

      9d8d00134dd811d78b55bd985f55a7a6555978bb

    • SHA256

      4268265365360b20ab52de6762a5724802fd185ac3c4a06c68ca87c8adecb459

    • SHA512

      c65f0c3d7be2b3f9446c7e7cb569392e9fea2970685eb6f9b7f81991b3342e8d9482021fe3925503e63d60ae1dbdab6d9567332bd9faa1036bd13f35e2d76f2d

    • SSDEEP

      3072:chOmTsF93UYfwC6GIout5pi8rY9AABa1AlWn2wpD:ccm4FmowdHoS5ddW3W2wp

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks