Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.3b348c05ea9f60284cf4f599ec711700.exe

  • Size

    57KB

  • Sample

    231107-zqrxpsgc9w

  • MD5

    3b348c05ea9f60284cf4f599ec711700

  • SHA1

    7f975492324072128a050aea992a2193c7374a4c

  • SHA256

    add030135929e1a8eca82cdd23607b65cd8838e1d3935fc7c1ef5f7ce16d3076

  • SHA512

    09d219de22ed81546736d44fff05abb0dc09ce0c63799178bff281cfd37e2b102a1d53b1e16b9d9879e76758b80ed9856ce28136a416f6696e8f73e865ac5f13

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIKTIPSw:ymb3NkkiQ3mdBjFIQw

Malware Config

Targets

    • Target

      NEAS.3b348c05ea9f60284cf4f599ec711700.exe

    • Size

      57KB

    • MD5

      3b348c05ea9f60284cf4f599ec711700

    • SHA1

      7f975492324072128a050aea992a2193c7374a4c

    • SHA256

      add030135929e1a8eca82cdd23607b65cd8838e1d3935fc7c1ef5f7ce16d3076

    • SHA512

      09d219de22ed81546736d44fff05abb0dc09ce0c63799178bff281cfd37e2b102a1d53b1e16b9d9879e76758b80ed9856ce28136a416f6696e8f73e865ac5f13

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIKTIPSw:ymb3NkkiQ3mdBjFIQw

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks