Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.e1584cca234f9ad4939431578fc270e0.exe

  • Size

    134KB

  • Sample

    231028-y2f4xaca4y

  • MD5

    e1584cca234f9ad4939431578fc270e0

  • SHA1

    10b3f177242396587cfa3a0ff309b70a8c261efc

  • SHA256

    7cba174e1d374938b06058b66b7ef61279d06fdfa057c5983678769448393167

  • SHA512

    2d2129cabe1a58b36a0aff21e8247d2366689ace91faeb913d847746001d13304e79ef4933668f8fc2676297544e1e9c921b89f3c3c917bcf8d6c715f0431c67

  • SSDEEP

    3072:9hOmTsF93UYfwC6GIoutz5yLpcgDE4J/CyCB2H:9cm4FmowdHoS4/8QH

Malware Config

Targets

    • Target

      NEAS.e1584cca234f9ad4939431578fc270e0.exe

    • Size

      134KB

    • MD5

      e1584cca234f9ad4939431578fc270e0

    • SHA1

      10b3f177242396587cfa3a0ff309b70a8c261efc

    • SHA256

      7cba174e1d374938b06058b66b7ef61279d06fdfa057c5983678769448393167

    • SHA512

      2d2129cabe1a58b36a0aff21e8247d2366689ace91faeb913d847746001d13304e79ef4933668f8fc2676297544e1e9c921b89f3c3c917bcf8d6c715f0431c67

    • SSDEEP

      3072:9hOmTsF93UYfwC6GIoutz5yLpcgDE4J/CyCB2H:9cm4FmowdHoS4/8QH

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks