Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.c8a7504dc18831326760506ac798ae40.exe

  • Size

    54KB

  • Sample

    231113-g38rwaae7y

  • MD5

    c8a7504dc18831326760506ac798ae40

  • SHA1

    1866ac1c7e9a11b20f93fa1e88bc8031382a723b

  • SHA256

    a47fb79a9a2a63298ed22ca0944bc55ab71b6499fd504fd0370c4afa346f9b5a

  • SHA512

    4c97efbea13b5f5c572b811ced46b96e8c2394d6f640dbeda4b1ba9f19ac49da30f56501f1a784ae85557372eabd4be8441ecde69b0d7af27b8cb48e75ca5407

  • SSDEEP

    1536:zvQBeOGtrYS3srx93UBWfwC6Ggnouy8iT4+JTj:zhOmTsF93UYfwC6GIoutiTn

Malware Config

Targets

    • Target

      NEAS.c8a7504dc18831326760506ac798ae40.exe

    • Size

      54KB

    • MD5

      c8a7504dc18831326760506ac798ae40

    • SHA1

      1866ac1c7e9a11b20f93fa1e88bc8031382a723b

    • SHA256

      a47fb79a9a2a63298ed22ca0944bc55ab71b6499fd504fd0370c4afa346f9b5a

    • SHA512

      4c97efbea13b5f5c572b811ced46b96e8c2394d6f640dbeda4b1ba9f19ac49da30f56501f1a784ae85557372eabd4be8441ecde69b0d7af27b8cb48e75ca5407

    • SSDEEP

      1536:zvQBeOGtrYS3srx93UBWfwC6Ggnouy8iT4+JTj:zhOmTsF93UYfwC6GIoutiTn

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks