Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.a1c963ce1103f9a0b3690a35cd322f00.exe

  • Size

    226KB

  • Sample

    231103-qx1czsdf93

  • MD5

    a1c963ce1103f9a0b3690a35cd322f00

  • SHA1

    7f934362b8f539ebd86707bd7dcf7db782a1713d

  • SHA256

    798a9d49d7263a813d85e4ee5f5a08255dd0c81289e219c0245f808acb17fc03

  • SHA512

    8b9acdbfa98fd430a7d8d2b630b4376e775d4839e6e5c8987e301ecf5e6b0857484f960518b9ef38b56d56b1a4d2ee89646fd6ef1e9ac168361127fa0d2922cb

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFo73PYP1lri3KoSV31QOhsJ4p:n3C9BRo7MlrWKo+lp

Malware Config

Targets

    • Target

      NEAS.a1c963ce1103f9a0b3690a35cd322f00.exe

    • Size

      226KB

    • MD5

      a1c963ce1103f9a0b3690a35cd322f00

    • SHA1

      7f934362b8f539ebd86707bd7dcf7db782a1713d

    • SHA256

      798a9d49d7263a813d85e4ee5f5a08255dd0c81289e219c0245f808acb17fc03

    • SHA512

      8b9acdbfa98fd430a7d8d2b630b4376e775d4839e6e5c8987e301ecf5e6b0857484f960518b9ef38b56d56b1a4d2ee89646fd6ef1e9ac168361127fa0d2922cb

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFo73PYP1lri3KoSV31QOhsJ4p:n3C9BRo7MlrWKo+lp

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks