Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

ac4f321efe...2a.exe

windows7-x64

10

ac4f321efe...2a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ac4f321efe49526a1d6c815859a0125f4d6b97ed726b8329bf68732b74d6a02a

  • Size

    391KB

  • Sample

    240310-3rqyksed58

  • MD5

    cf0eb360c1aa2e54e46b230e0808d2b4

  • SHA1

    ae873ff1b99738889f3a626590f649b83cb3bfc7

  • SHA256

    ac4f321efe49526a1d6c815859a0125f4d6b97ed726b8329bf68732b74d6a02a

  • SHA512

    ca7c7dd86c6ead051b7c2e5dfc2628e4c66901d2fb784c4b7fdd8b9cd68790e6bc628754675796e4fcfffed5f9971401ead914f829335c4fe9c0b3093c83e567

  • SSDEEP

    6144:n3C9BRo7tvnJ9oH0IRgZvjkobjcSbcY+CaQdaFOY4iGFYtRdu/W:n3C9ytvngQjZbz+xt4vFBu

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      ac4f321efe49526a1d6c815859a0125f4d6b97ed726b8329bf68732b74d6a02a

    • Size

      391KB

    • MD5

      cf0eb360c1aa2e54e46b230e0808d2b4

    • SHA1

      ae873ff1b99738889f3a626590f649b83cb3bfc7

    • SHA256

      ac4f321efe49526a1d6c815859a0125f4d6b97ed726b8329bf68732b74d6a02a

    • SHA512

      ca7c7dd86c6ead051b7c2e5dfc2628e4c66901d2fb784c4b7fdd8b9cd68790e6bc628754675796e4fcfffed5f9971401ead914f829335c4fe9c0b3093c83e567

    • SSDEEP

      6144:n3C9BRo7tvnJ9oH0IRgZvjkobjcSbcY+CaQdaFOY4iGFYtRdu/W:n3C9ytvngQjZbz+xt4vFBu

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks