Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    20dfc6eb8377513ad0500f565bd49150_exe32_JC.exe

  • Size

    229KB

  • Sample

    231015-wzvs6scb86

  • MD5

    20dfc6eb8377513ad0500f565bd49150

  • SHA1

    537f512d80b7020f974598ab7dd65191c6dca50c

  • SHA256

    f0d7d0a5a80e1013d69efca5c953d96b91811d701c9a704f2981d89c3f60782d

  • SHA512

    1d0acc7ab94eb044940e576de080c5408184d710c5376e745492c5d90e043a37eeb2b66ad31ba5e52a93d0ae5024d254861ed69855fde4dd5bbb6ff1f552f6fd

  • SSDEEP

    6144:n3C9BRo7tvnJ9oEz2Eu9XgcVyDOoZU0Wm4:n3C9ytvnV2NQAo20Wm4

Malware Config

Targets

    • Target

      20dfc6eb8377513ad0500f565bd49150_exe32_JC.exe

    • Size

      229KB

    • MD5

      20dfc6eb8377513ad0500f565bd49150

    • SHA1

      537f512d80b7020f974598ab7dd65191c6dca50c

    • SHA256

      f0d7d0a5a80e1013d69efca5c953d96b91811d701c9a704f2981d89c3f60782d

    • SHA512

      1d0acc7ab94eb044940e576de080c5408184d710c5376e745492c5d90e043a37eeb2b66ad31ba5e52a93d0ae5024d254861ed69855fde4dd5bbb6ff1f552f6fd

    • SSDEEP

      6144:n3C9BRo7tvnJ9oEz2Eu9XgcVyDOoZU0Wm4:n3C9ytvnV2NQAo20Wm4

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks