Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.a7479cf588c460438fde2d839d5f6b00.exe

  • Size

    209KB

  • Sample

    231016-w6ltvahc7x

  • MD5

    a7479cf588c460438fde2d839d5f6b00

  • SHA1

    0272cb63675ddfd3328977d502442b351c092a17

  • SHA256

    4d9aece4fa007978fead1c7aef001b76e19543c76357e073571adab51cda5d71

  • SHA512

    a4e3a07f77830f9708a9e51311837113703f7b37100cbda1638f6df9fd5fef741566dc17cc492c8ae982b1217444bcd5be8903a063af0ba1b585d55c2a5c3502

  • SSDEEP

    6144:kcm4FmowdHoSphraH+W0+9JGW594s2jULIDNce:y4wFHoS3eeWR9JGW594tjU6r

Malware Config

Targets

    • Target

      NEAS.a7479cf588c460438fde2d839d5f6b00.exe

    • Size

      209KB

    • MD5

      a7479cf588c460438fde2d839d5f6b00

    • SHA1

      0272cb63675ddfd3328977d502442b351c092a17

    • SHA256

      4d9aece4fa007978fead1c7aef001b76e19543c76357e073571adab51cda5d71

    • SHA512

      a4e3a07f77830f9708a9e51311837113703f7b37100cbda1638f6df9fd5fef741566dc17cc492c8ae982b1217444bcd5be8903a063af0ba1b585d55c2a5c3502

    • SSDEEP

      6144:kcm4FmowdHoSphraH+W0+9JGW594s2jULIDNce:y4wFHoS3eeWR9JGW594tjU6r

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks