Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    46432f19f95cf8ceb3b45e1ebcf251c0_exe32.exe

  • Size

    210KB

  • Sample

    231015-ybvjlsdb72

  • MD5

    46432f19f95cf8ceb3b45e1ebcf251c0

  • SHA1

    cfe7736aa581b55df6b3cbd10f4acac6d3fad6b8

  • SHA256

    24f2780e2b9918f3a5fcff52c35266c6ced304b06b6703d7c44f1789865a47be

  • SHA512

    f5e2afc507415ab5efe1ac22ec7eeb9a25cdfdb54fbf5b102eaffc290a232ebb017ea345afba8c4919cec48797124137c390b6ecc05a4cb415cd95519e325883

  • SSDEEP

    6144:0cm4FmowdHoSOI18yP0ddWX+a/zq6atGJ7TU:C4wFHoSF/P0ddWX+yzq6aw7TU

Malware Config

Targets

    • Target

      46432f19f95cf8ceb3b45e1ebcf251c0_exe32.exe

    • Size

      210KB

    • MD5

      46432f19f95cf8ceb3b45e1ebcf251c0

    • SHA1

      cfe7736aa581b55df6b3cbd10f4acac6d3fad6b8

    • SHA256

      24f2780e2b9918f3a5fcff52c35266c6ced304b06b6703d7c44f1789865a47be

    • SHA512

      f5e2afc507415ab5efe1ac22ec7eeb9a25cdfdb54fbf5b102eaffc290a232ebb017ea345afba8c4919cec48797124137c390b6ecc05a4cb415cd95519e325883

    • SSDEEP

      6144:0cm4FmowdHoSOI18yP0ddWX+a/zq6atGJ7TU:C4wFHoSF/P0ddWX+yzq6aw7TU

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks