Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

06287fa228...18.exe

windows7-x64

10

06287fa228...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    06287fa228425e823150ed4af3bebd11_JaffaCakes118

  • Size

    190KB

  • Sample

    240428-1s92qsae3y

  • MD5

    06287fa228425e823150ed4af3bebd11

  • SHA1

    0995123376c401338ad81e3721f3dff77624b50c

  • SHA256

    00772b2f101126e1d227af508946b205f166332dcd14e047ff5d1e7d862f6148

  • SHA512

    43356483e92d36eff32e8ff4fe85f442f924a738c8e51bed515c26a20fb6414395c8b9652fe639c0acb1654aa25c67d696685e1e743830b06b7d17649d757a72

  • SSDEEP

    1536:EvQBeOGtrYSSsrc93UBIfdC67m6AJiqjt3ufT/FRxZOYCqc:EhOm2sI93UufdC67ciyt3ujFf73c

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      06287fa228425e823150ed4af3bebd11_JaffaCakes118

    • Size

      190KB

    • MD5

      06287fa228425e823150ed4af3bebd11

    • SHA1

      0995123376c401338ad81e3721f3dff77624b50c

    • SHA256

      00772b2f101126e1d227af508946b205f166332dcd14e047ff5d1e7d862f6148

    • SHA512

      43356483e92d36eff32e8ff4fe85f442f924a738c8e51bed515c26a20fb6414395c8b9652fe639c0acb1654aa25c67d696685e1e743830b06b7d17649d757a72

    • SSDEEP

      1536:EvQBeOGtrYSSsrc93UBIfdC67m6AJiqjt3ufT/FRxZOYCqc:EhOm2sI93UufdC67ciyt3ujFf73c

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks