Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    02571da8f25665e3ec754d43822aec1d_JaffaCakes118

  • Size

    198KB

  • Sample

    240427-d9jjsaac44

  • MD5

    02571da8f25665e3ec754d43822aec1d

  • SHA1

    b5d19fe45266625319e2e2f1293a8b1779b3c789

  • SHA256

    5849f424983eda4a8e4f1ee10e0c77d0338397d77a9acb91bebf34706c3da882

  • SHA512

    c4229cd0f1560ac06807d0c212f7498fed24c955a8584b4b38d33cd5584704ec3873468069738748142ce07abfce83deef3f00eaebd02543b0b112c02ce76317

  • SSDEEP

    1536:PvQBeOGtrYSSsrc93UBIfdC67m6AJiqyV/TW:PhOm2sI93UufdC67cihV/TW

Malware Config

Targets

    • Target

      02571da8f25665e3ec754d43822aec1d_JaffaCakes118

    • Size

      198KB

    • MD5

      02571da8f25665e3ec754d43822aec1d

    • SHA1

      b5d19fe45266625319e2e2f1293a8b1779b3c789

    • SHA256

      5849f424983eda4a8e4f1ee10e0c77d0338397d77a9acb91bebf34706c3da882

    • SHA512

      c4229cd0f1560ac06807d0c212f7498fed24c955a8584b4b38d33cd5584704ec3873468069738748142ce07abfce83deef3f00eaebd02543b0b112c02ce76317

    • SSDEEP

      1536:PvQBeOGtrYSSsrc93UBIfdC67m6AJiqyV/TW:PhOm2sI93UufdC67cihV/TW

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.