Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.e5d76...JC.exe

windows7-x64

10

NEAS.e5d76...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.e5d76daead20c846bdc2f0671ae2bdd0_JC.exe

  • Size

    407KB

  • Sample

    231031-1aq6xagb27

  • MD5

    e5d76daead20c846bdc2f0671ae2bdd0

  • SHA1

    14a09f68099181e614dcde57bbc4cbe75569ab16

  • SHA256

    794e24350dff4477052fa9d0fe1e5547bbcdc4e3c5aba7e83100ff0dfb60211c

  • SHA512

    6cec6678fc222c2582dd51c6907a0c6111aeb783aa16b7bc29ea2c04cd4b5bbb4695a9556aaee37e40984f7fc0c73afc36ac3ac8a249df16446dd90d4f664f4f

  • SSDEEP

    6144:n3C9BRo7MlrWKo+lS0Le4xRSAoq78yoyfx9FK:n3C9yMo+S0L9xRnoq7H9FK

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      NEAS.e5d76daead20c846bdc2f0671ae2bdd0_JC.exe

    • Size

      407KB

    • MD5

      e5d76daead20c846bdc2f0671ae2bdd0

    • SHA1

      14a09f68099181e614dcde57bbc4cbe75569ab16

    • SHA256

      794e24350dff4477052fa9d0fe1e5547bbcdc4e3c5aba7e83100ff0dfb60211c

    • SHA512

      6cec6678fc222c2582dd51c6907a0c6111aeb783aa16b7bc29ea2c04cd4b5bbb4695a9556aaee37e40984f7fc0c73afc36ac3ac8a249df16446dd90d4f664f4f

    • SSDEEP

      6144:n3C9BRo7MlrWKo+lS0Le4xRSAoq78yoyfx9FK:n3C9yMo+S0L9xRnoq7H9FK

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks