Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.bfc58...f0.exe

windows7-x64

10

NEAS.bfc58...f0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.bfc58916ecb82b0722c30a119a02dff0.exe

  • Size

    233KB

  • Sample

    231021-1cv8msaf38

  • MD5

    bfc58916ecb82b0722c30a119a02dff0

  • SHA1

    6e04697aa5185e99ab0da105a2654f37abf6c3a1

  • SHA256

    42bcbfbfc0019acea5db079ed46bad64658a57b0286a1ba9e7ef83125b08ba01

  • SHA512

    1c4f603888a602e5d86d155f4c8c2e98ed86b6bfa898aa04824d1d60be7d4f98bb63bddb136e7757b7cffee7f1ba405a64f93f11b4b67c8ce3c1411c982ee607

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFo73PYP1lri3KoSV31x4MAWYi7tQ:n3C9BRo7MlrWKo+lxtntQ

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      NEAS.bfc58916ecb82b0722c30a119a02dff0.exe

    • Size

      233KB

    • MD5

      bfc58916ecb82b0722c30a119a02dff0

    • SHA1

      6e04697aa5185e99ab0da105a2654f37abf6c3a1

    • SHA256

      42bcbfbfc0019acea5db079ed46bad64658a57b0286a1ba9e7ef83125b08ba01

    • SHA512

      1c4f603888a602e5d86d155f4c8c2e98ed86b6bfa898aa04824d1d60be7d4f98bb63bddb136e7757b7cffee7f1ba405a64f93f11b4b67c8ce3c1411c982ee607

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFo73PYP1lri3KoSV31x4MAWYi7tQ:n3C9BRo7MlrWKo+lxtntQ

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks