Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

15/11/2023, 00:56

231115-bam2taag91 10

General

  • Target

    NEAS.acc36e4f9273aef9d917c78d35244d00.exe

  • Size

    96KB

  • Sample

    231115-bam2taag91

  • MD5

    acc36e4f9273aef9d917c78d35244d00

  • SHA1

    0b39cb4548113492f5bca3fd719c135842b70916

  • SHA256

    c6d1828a9e34326bea3b1de503adbae206c22b8050eab2d3964dc4f1f425bbdc

  • SHA512

    d7b814c10fb136879b2982ba1e56bc8e25671574c4ece03f916990664e43defea0690ca200cf9ba0bd3307e5c1d2d46e37de521d5ab65f02891822db1d426c23

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFWXkj7afodnmm9Ao98hd:n3C9BRW0j/tmm9nwd

Malware Config

Targets

    • Target

      NEAS.acc36e4f9273aef9d917c78d35244d00.exe

    • Size

      96KB

    • MD5

      acc36e4f9273aef9d917c78d35244d00

    • SHA1

      0b39cb4548113492f5bca3fd719c135842b70916

    • SHA256

      c6d1828a9e34326bea3b1de503adbae206c22b8050eab2d3964dc4f1f425bbdc

    • SHA512

      d7b814c10fb136879b2982ba1e56bc8e25671574c4ece03f916990664e43defea0690ca200cf9ba0bd3307e5c1d2d46e37de521d5ab65f02891822db1d426c23

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFWXkj7afodnmm9Ao98hd:n3C9BRW0j/tmm9nwd

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks