Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.87743fdebb2c7628286e92a457857330_JC.exe

  • Size

    396KB

  • Sample

    231102-n9xfrabe6y

  • MD5

    87743fdebb2c7628286e92a457857330

  • SHA1

    77b69d202df9c6248044b6ab59792e440d2a2a19

  • SHA256

    5e2b79b6a3b5ed0c36fb3e4ef8c67f3f4f63631ab627c19afd414fc0eba6d37f

  • SHA512

    f2e7505b5b88845c6d127d8bc94deffe26422678e9679746821edf2ce90b950233216afed96d59e67d86fb7400b19fdac91f5c1022bb77e6712095975905dcb7

  • SSDEEP

    3072:8hOm2sI93UufdC67cimD5t251UrRE9TTFwT0JOfZtng:8cm7ImGddXmNt251UriZFwT+aZtg

Malware Config

Targets

    • Target

      NEAS.87743fdebb2c7628286e92a457857330_JC.exe

    • Size

      396KB

    • MD5

      87743fdebb2c7628286e92a457857330

    • SHA1

      77b69d202df9c6248044b6ab59792e440d2a2a19

    • SHA256

      5e2b79b6a3b5ed0c36fb3e4ef8c67f3f4f63631ab627c19afd414fc0eba6d37f

    • SHA512

      f2e7505b5b88845c6d127d8bc94deffe26422678e9679746821edf2ce90b950233216afed96d59e67d86fb7400b19fdac91f5c1022bb77e6712095975905dcb7

    • SSDEEP

      3072:8hOm2sI93UufdC67cimD5t251UrRE9TTFwT0JOfZtng:8cm7ImGddXmNt251UriZFwT+aZtg

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks