Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    c5f3b10f32a049b9f14923551acb4aeabdb4f5a38d51e1780f6466887fe16f33

  • Size

    424KB

  • Sample

    240429-chc29afa92

  • MD5

    b528fec4af832641128758aa11a969e7

  • SHA1

    f9731ba919e3d015b7073db8a7a92541b67023f3

  • SHA256

    c5f3b10f32a049b9f14923551acb4aeabdb4f5a38d51e1780f6466887fe16f33

  • SHA512

    81832aa84caa02dbbc7965cbc52df3851d9faa5082385d816f90506cc12f81686c11ee76c88724273062453353f9ed79e0e5866bca5b8823cead81db64f7a21e

  • SSDEEP

    12288:C4wFBh2F5BVzPSMh2F5BVzPSMh2F5BVzPS1:NL1ML1ML1m

Malware Config

Targets

    • Target

      c5f3b10f32a049b9f14923551acb4aeabdb4f5a38d51e1780f6466887fe16f33

    • Size

      424KB

    • MD5

      b528fec4af832641128758aa11a969e7

    • SHA1

      f9731ba919e3d015b7073db8a7a92541b67023f3

    • SHA256

      c5f3b10f32a049b9f14923551acb4aeabdb4f5a38d51e1780f6466887fe16f33

    • SHA512

      81832aa84caa02dbbc7965cbc52df3851d9faa5082385d816f90506cc12f81686c11ee76c88724273062453353f9ed79e0e5866bca5b8823cead81db64f7a21e

    • SSDEEP

      12288:C4wFBh2F5BVzPSMh2F5BVzPSMh2F5BVzPS1:NL1ML1ML1m

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks