Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

7

00f2c6a787...18.exe

windows7-x64

10

00f2c6a787...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    00f2c6a78798d12bb2d055da1c65005b_JaffaCakes118

  • Size

    72KB

  • Sample

    240426-rjqr3adc96

  • MD5

    00f2c6a78798d12bb2d055da1c65005b

  • SHA1

    735ba26f46e939f1b68d454e37e7c11f7ef790c6

  • SHA256

    9c2b763cf8f2d0d3db267ddb00851fa4abe8a815eb43a85995d95e31ddcd2fe8

  • SHA512

    7305bf5a144e1bc35e689781008304a4cf56ae229c4d0a9205278348f2d9ccfa61832edf5e410483712323f7adbe1d1b53d2d9bd15264c4565e926fb5662d9c1

  • SSDEEP

    1536:TvQBeOGtrYS3srx93UBWfwC6Ggnouy80vU2r1vERckymCeF:ThOmTsF93UYfwC6GIout0vH1AQmL

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      00f2c6a78798d12bb2d055da1c65005b_JaffaCakes118

    • Size

      72KB

    • MD5

      00f2c6a78798d12bb2d055da1c65005b

    • SHA1

      735ba26f46e939f1b68d454e37e7c11f7ef790c6

    • SHA256

      9c2b763cf8f2d0d3db267ddb00851fa4abe8a815eb43a85995d95e31ddcd2fe8

    • SHA512

      7305bf5a144e1bc35e689781008304a4cf56ae229c4d0a9205278348f2d9ccfa61832edf5e410483712323f7adbe1d1b53d2d9bd15264c4565e926fb5662d9c1

    • SSDEEP

      1536:TvQBeOGtrYS3srx93UBWfwC6Ggnouy80vU2r1vERckymCeF:ThOmTsF93UYfwC6GIout0vH1AQmL

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks