Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2263240a6f2466525df127c0ed2bc58f

  • Size

    240KB

  • Sample

    231219-pnz57acabl

  • MD5

    2263240a6f2466525df127c0ed2bc58f

  • SHA1

    680affe42065601959965aa13eb8615a50fa973f

  • SHA256

    990f4dd9408f59104a9a2a296f058c9471967155ee9cc94544cd87e3d2669c99

  • SHA512

    8e6369457739dec263fee203279452dc194a5a1bc4d19bcf09d4c0ebb4a65ba4f8180080866b09b5e96e4724047423f3a9bc2a038c074122731e4d4cff604285

  • SSDEEP

    6144:n3C9BRo7tvnJ9oEz2Eu9XgcVyDOoZU0wG:n3C9ytvnV2NQAo20wG

Malware Config

Targets

    • Target

      2263240a6f2466525df127c0ed2bc58f

    • Size

      240KB

    • MD5

      2263240a6f2466525df127c0ed2bc58f

    • SHA1

      680affe42065601959965aa13eb8615a50fa973f

    • SHA256

      990f4dd9408f59104a9a2a296f058c9471967155ee9cc94544cd87e3d2669c99

    • SHA512

      8e6369457739dec263fee203279452dc194a5a1bc4d19bcf09d4c0ebb4a65ba4f8180080866b09b5e96e4724047423f3a9bc2a038c074122731e4d4cff604285

    • SSDEEP

      6144:n3C9BRo7tvnJ9oEz2Eu9XgcVyDOoZU0wG:n3C9ytvnV2NQAo20wG

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks