Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.30d851a66cff1f1c84a7800e3084d580.exe

  • Size

    74KB

  • Sample

    231111-vq9qasag55

  • MD5

    30d851a66cff1f1c84a7800e3084d580

  • SHA1

    3852bd5f4b3f06e75369ce7ca8348bddc82d4652

  • SHA256

    66005d0b5b0ee2048a71f2ce240e822942a280b06c869f37c4f15b37510fe707

  • SHA512

    1acf2449e8171f45edbf897b55113781fd897fb4198c241836503c47d6d42998675e23cb9b7588a275609dd7269bb93e7e5b26db70a9e4366ba1d6bc792d6135

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDWiekja1br3GGBxfotGpS7TkQ:ymb3NkkiQ3mdBjFWXkj7afowpe

Malware Config

Targets

    • Target

      NEAS.30d851a66cff1f1c84a7800e3084d580.exe

    • Size

      74KB

    • MD5

      30d851a66cff1f1c84a7800e3084d580

    • SHA1

      3852bd5f4b3f06e75369ce7ca8348bddc82d4652

    • SHA256

      66005d0b5b0ee2048a71f2ce240e822942a280b06c869f37c4f15b37510fe707

    • SHA512

      1acf2449e8171f45edbf897b55113781fd897fb4198c241836503c47d6d42998675e23cb9b7588a275609dd7269bb93e7e5b26db70a9e4366ba1d6bc792d6135

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDWiekja1br3GGBxfotGpS7TkQ:ymb3NkkiQ3mdBjFWXkj7afowpe

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks