Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    1fda70f9ebbfda0ca8630ce65cfaaae0_exe32_JC.exe

  • Size

    193KB

  • Sample

    231015-wv4waacb58

  • MD5

    1fda70f9ebbfda0ca8630ce65cfaaae0

  • SHA1

    ade25eefcd24105651bdf54ebe085b9d8c2918e3

  • SHA256

    a5fd8ade5645f5fd92637bf5634928379d0f5763007c539149bd78fee1bb7c3d

  • SHA512

    3e9bd5718460d339cd6615e17994a221206672a1f8ce0b6ad7cc8c8b2920c5fc0d0f666687375332f41f41d9614b302a073de5a32e29992137f69219fda81de8

  • SSDEEP

    3072:xhOmTsF93UYfwC6GIout3WVi/8HCpi8rY9AABa1YRMxl1522cJ1a:xcm4FmowdHoS3WV28HCddWhRO1Lci

Malware Config

Targets

    • Target

      1fda70f9ebbfda0ca8630ce65cfaaae0_exe32_JC.exe

    • Size

      193KB

    • MD5

      1fda70f9ebbfda0ca8630ce65cfaaae0

    • SHA1

      ade25eefcd24105651bdf54ebe085b9d8c2918e3

    • SHA256

      a5fd8ade5645f5fd92637bf5634928379d0f5763007c539149bd78fee1bb7c3d

    • SHA512

      3e9bd5718460d339cd6615e17994a221206672a1f8ce0b6ad7cc8c8b2920c5fc0d0f666687375332f41f41d9614b302a073de5a32e29992137f69219fda81de8

    • SSDEEP

      3072:xhOmTsF93UYfwC6GIout3WVi/8HCpi8rY9AABa1YRMxl1522cJ1a:xcm4FmowdHoS3WV28HCddWhRO1Lci

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks