Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.df69b...d0.exe

windows7-x64

10

NEAS.df69b...d0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.df69b73cafbd4cac5c473bbbbc0413d0.exe

  • Size

    465KB

  • Sample

    231111-wxv16abd58

  • MD5

    df69b73cafbd4cac5c473bbbbc0413d0

  • SHA1

    2bdcc6773bb57beec4dfa57ead50dd6d81046b88

  • SHA256

    ed08130b0f40bdbf5f5cfc7149484a4deccda8d309d0beddeaf321d748885def

  • SHA512

    a261411c83581e683ea15a135b7d935ed0d9c4d74a2356d3a8ae13021b3b467856e9d5d71d1ab7700dd0ac1fff027e286dc1b577d75550a38cf0082161ce4a4a

  • SSDEEP

    12288:n3C9uDVw6326pKZ9asZqoZHz+evcn0Meh2Fa:Su326p0aroZt0C

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      NEAS.df69b73cafbd4cac5c473bbbbc0413d0.exe

    • Size

      465KB

    • MD5

      df69b73cafbd4cac5c473bbbbc0413d0

    • SHA1

      2bdcc6773bb57beec4dfa57ead50dd6d81046b88

    • SHA256

      ed08130b0f40bdbf5f5cfc7149484a4deccda8d309d0beddeaf321d748885def

    • SHA512

      a261411c83581e683ea15a135b7d935ed0d9c4d74a2356d3a8ae13021b3b467856e9d5d71d1ab7700dd0ac1fff027e286dc1b577d75550a38cf0082161ce4a4a

    • SSDEEP

      12288:n3C9uDVw6326pKZ9asZqoZHz+evcn0Meh2Fa:Su326p0aroZt0C

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks