Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    f3dad085ce70334a79f2a057d8843790_exe32.exe

  • Size

    396KB

  • Sample

    231015-ykff2sag22

  • MD5

    f3dad085ce70334a79f2a057d8843790

  • SHA1

    e9a91906cd0b969e533a6a3fe5a9ce496d6fea83

  • SHA256

    541685f59bee2663b91cd19e42b8db3fdb43afa20099ccb8664b0329d7c294b8

  • SHA512

    5cc8e67d17bb64f5c4d7ac004d5ddb91a547c821cd114ba0ab05f3eee91f5fefc11f1716f588603b49215a3ae487efc9a3f34ed1fc3d5eb13b906cd934d03492

  • SSDEEP

    6144:kcm4FmowdHoSph3Ymu8wdHoSM05d34iWRbzamqs:y4wFHoS3zuxHoSTd34iWRhqs

Malware Config

Targets

    • Target

      f3dad085ce70334a79f2a057d8843790_exe32.exe

    • Size

      396KB

    • MD5

      f3dad085ce70334a79f2a057d8843790

    • SHA1

      e9a91906cd0b969e533a6a3fe5a9ce496d6fea83

    • SHA256

      541685f59bee2663b91cd19e42b8db3fdb43afa20099ccb8664b0329d7c294b8

    • SHA512

      5cc8e67d17bb64f5c4d7ac004d5ddb91a547c821cd114ba0ab05f3eee91f5fefc11f1716f588603b49215a3ae487efc9a3f34ed1fc3d5eb13b906cd934d03492

    • SSDEEP

      6144:kcm4FmowdHoSph3Ymu8wdHoSM05d34iWRbzamqs:y4wFHoS3zuxHoSTd34iWRhqs

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks