Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.8bbb6...50.exe

windows7-x64

10

NEAS.8bbb6...50.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.8bbb62c77bed134b6692405b63512750.exe

  • Size

    67KB

  • Sample

    231014-wnzmzseg44

  • MD5

    8bbb62c77bed134b6692405b63512750

  • SHA1

    09f13121689969f0b3992411adb5b5e8caeac75e

  • SHA256

    b061e9e71b46790f781acfc2b10ce74a860ee6e5f586fcafcf48dd8f3ea6be0b

  • SHA512

    bb6949fb708386366c4048e2bcefca0c5f16bb5ec6dfa256e3f2e19a16154d123c2407bc026e87cda9671b34d732050649e14f7335993df8acc549d4ddecde19

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIzX0WX:ymb3NkkiQ3mdBjFIzvX

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      NEAS.8bbb62c77bed134b6692405b63512750.exe

    • Size

      67KB

    • MD5

      8bbb62c77bed134b6692405b63512750

    • SHA1

      09f13121689969f0b3992411adb5b5e8caeac75e

    • SHA256

      b061e9e71b46790f781acfc2b10ce74a860ee6e5f586fcafcf48dd8f3ea6be0b

    • SHA512

      bb6949fb708386366c4048e2bcefca0c5f16bb5ec6dfa256e3f2e19a16154d123c2407bc026e87cda9671b34d732050649e14f7335993df8acc549d4ddecde19

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIzX0WX:ymb3NkkiQ3mdBjFIzvX

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks