Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.ba735208cea5597a0a5bb154332929e0.exe

  • Size

    54KB

  • Sample

    231016-w75cksac8v

  • MD5

    ba735208cea5597a0a5bb154332929e0

  • SHA1

    5750dc71eef0a9603378a64e997cc872184dd0a2

  • SHA256

    99b56bccb75ab8d4fecc90ca77e2be594ec2e1a6e380a3b0191129b712acf245

  • SHA512

    26e7b23e90d0f9083781407f7808de02d9911a74ec77b634d2eef1e7e01ae9bbd62ecbe2cc700e1842c2e4e92d9fabfe1e9dbf873ef96c85c0aaee5640ce1587

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIz3n:ymb3NkkiQ3mdBjFIz3n

Malware Config

Targets

    • Target

      NEAS.ba735208cea5597a0a5bb154332929e0.exe

    • Size

      54KB

    • MD5

      ba735208cea5597a0a5bb154332929e0

    • SHA1

      5750dc71eef0a9603378a64e997cc872184dd0a2

    • SHA256

      99b56bccb75ab8d4fecc90ca77e2be594ec2e1a6e380a3b0191129b712acf245

    • SHA512

      26e7b23e90d0f9083781407f7808de02d9911a74ec77b634d2eef1e7e01ae9bbd62ecbe2cc700e1842c2e4e92d9fabfe1e9dbf873ef96c85c0aaee5640ce1587

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIz3n:ymb3NkkiQ3mdBjFIz3n

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks