Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

b244d96b2f...e6.exe

windows7-x64

10

b244d96b2f...e6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b244d96b2f17d97246e34d5cce7e53df3da8966167abae75fc140098a2be84e6

  • Size

    197KB

  • Sample

    240315-2yn7wsdc6x

  • MD5

    5aa1c20bd8dfde913da39763b119fd1d

  • SHA1

    dacab93cda94693f707d68cbc915ac4b9d99b516

  • SHA256

    b244d96b2f17d97246e34d5cce7e53df3da8966167abae75fc140098a2be84e6

  • SHA512

    3a1f3eec47d7cbf39cde7b0e50f76741a8372b3febeed3fd847aa4be2ff34f81cf43cde3d565775cf1db5eec100eee490660f2a421615572bbbc57ad4f60e616

  • SSDEEP

    3072:xhOmTsF93UYfwC6GIout3WVi/8HCpi8rY9AABa1YRMxl1522cJ1uIH:xcm4FmowdHoS3WV28HCddWhRO1Lc9H

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      b244d96b2f17d97246e34d5cce7e53df3da8966167abae75fc140098a2be84e6

    • Size

      197KB

    • MD5

      5aa1c20bd8dfde913da39763b119fd1d

    • SHA1

      dacab93cda94693f707d68cbc915ac4b9d99b516

    • SHA256

      b244d96b2f17d97246e34d5cce7e53df3da8966167abae75fc140098a2be84e6

    • SHA512

      3a1f3eec47d7cbf39cde7b0e50f76741a8372b3febeed3fd847aa4be2ff34f81cf43cde3d565775cf1db5eec100eee490660f2a421615572bbbc57ad4f60e616

    • SSDEEP

      3072:xhOmTsF93UYfwC6GIout3WVi/8HCpi8rY9AABa1YRMxl1522cJ1uIH:xcm4FmowdHoS3WV28HCddWhRO1Lc9H

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks