Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

9df901aa00...41.exe

windows7-x64

10

9df901aa00...41.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9df901aa003bd47016ef7976233bcfbc63a7f74a21537a38498110cdf1955341.exe

  • Size

    440KB

  • Sample

    240409-yr9cpscd2z

  • MD5

    d5239ba56ef2f39b1da523e804f33625

  • SHA1

    a9399024792609e7943c95a5e7b61c75255606e4

  • SHA256

    9df901aa003bd47016ef7976233bcfbc63a7f74a21537a38498110cdf1955341

  • SHA512

    ce4257251920599a88e67f36d91585c9b58ba2d7a40023bb35b28241b01752b98afcf569e7777b0fed5a9512d09e15fbc648518b7c6cf2656e68024c1e4e6288

  • SSDEEP

    6144:xozXQKqfmiiyWwuiFOLeyOV0R7YRXxMSaAn:xgXQKSLpOCtV0R8xMSaAn

Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target

      9df901aa003bd47016ef7976233bcfbc63a7f74a21537a38498110cdf1955341.exe

    • Size

      440KB

    • MD5

      d5239ba56ef2f39b1da523e804f33625

    • SHA1

      a9399024792609e7943c95a5e7b61c75255606e4

    • SHA256

      9df901aa003bd47016ef7976233bcfbc63a7f74a21537a38498110cdf1955341

    • SHA512

      ce4257251920599a88e67f36d91585c9b58ba2d7a40023bb35b28241b01752b98afcf569e7777b0fed5a9512d09e15fbc648518b7c6cf2656e68024c1e4e6288

    • SSDEEP

      6144:xozXQKqfmiiyWwuiFOLeyOV0R7YRXxMSaAn:xgXQKSLpOCtV0R8xMSaAn

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks