Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

cf5651b9d6...bc.exe

windows7-x64

10

cf5651b9d6...bc.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cf5651b9d6ab4948a3835e79201a89c12a3c4e7498e7730fba302d9c5a3dc8bc

  • Size

    537KB

  • Sample

    240423-epwt2scg9s

  • MD5

    efcb3864632d0799969138af2d06fcc9

  • SHA1

    2fd3741dd2d285ba4f5f2f87f57b7808513666f5

  • SHA256

    cf5651b9d6ab4948a3835e79201a89c12a3c4e7498e7730fba302d9c5a3dc8bc

  • SHA512

    9eadc991732649ce4eb85e47d017fceb6ff9c02b33c3372289e9c32b3d069a5aff02770234ac4b606590f5c420c3a5253cc13fee5259e711d5a6dccd1b4b8628

  • SSDEEP

    12288:y4wFHoS3eFp3IDvSbh5nP+UbGTHoSouKs8N0u/D6vIZj:HFp3lzZbGa5soj

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      cf5651b9d6ab4948a3835e79201a89c12a3c4e7498e7730fba302d9c5a3dc8bc

    • Size

      537KB

    • MD5

      efcb3864632d0799969138af2d06fcc9

    • SHA1

      2fd3741dd2d285ba4f5f2f87f57b7808513666f5

    • SHA256

      cf5651b9d6ab4948a3835e79201a89c12a3c4e7498e7730fba302d9c5a3dc8bc

    • SHA512

      9eadc991732649ce4eb85e47d017fceb6ff9c02b33c3372289e9c32b3d069a5aff02770234ac4b606590f5c420c3a5253cc13fee5259e711d5a6dccd1b4b8628

    • SSDEEP

      12288:y4wFHoS3eFp3IDvSbh5nP+UbGTHoSouKs8N0u/D6vIZj:HFp3lzZbGa5soj

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks