Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.02f7357855f89d0f7c2c0baf6364e950.exe

  • Size

    78KB

  • Sample

    231106-1wm2dahb79

  • MD5

    02f7357855f89d0f7c2c0baf6364e950

  • SHA1

    bc59ebc85ee4921c669027407979ee69a9758af1

  • SHA256

    b9ab5445c84aa49ccd5cece88e96094198aad01358f35e2566853cdc1afa2ac3

  • SHA512

    838983687d4802f18e9809c1c7f69e8a15366611b7b2237802c4ff581e22d14a252c601255c64d829ed83f02b0ad0c778f45f71961feec5434b6cd5a238dee93

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDoLU1gxmcK8S9/LhuQhj:ymb3NkkiQ3mdBjFoLkmW8A/bj

Malware Config

Targets

    • Target

      NEAS.02f7357855f89d0f7c2c0baf6364e950.exe

    • Size

      78KB

    • MD5

      02f7357855f89d0f7c2c0baf6364e950

    • SHA1

      bc59ebc85ee4921c669027407979ee69a9758af1

    • SHA256

      b9ab5445c84aa49ccd5cece88e96094198aad01358f35e2566853cdc1afa2ac3

    • SHA512

      838983687d4802f18e9809c1c7f69e8a15366611b7b2237802c4ff581e22d14a252c601255c64d829ed83f02b0ad0c778f45f71961feec5434b6cd5a238dee93

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDoLU1gxmcK8S9/LhuQhj:ymb3NkkiQ3mdBjFoLkmW8A/bj

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks