Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

93487076b4...f9.exe

windows7-x64

10

93487076b4...f9.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    93487076b45f16fa3ddaa2a81793b0c1d85bcacb7a0d3b70d55555e7fba466f9

  • Size

    94KB

  • Sample

    240501-a8hpbabg5w

  • MD5

    70b43b60e16400939b9b137c7cfb09b5

  • SHA1

    80b1ebfb7a31e460001e3db91cfc8aa925ff015a

  • SHA256

    93487076b45f16fa3ddaa2a81793b0c1d85bcacb7a0d3b70d55555e7fba466f9

  • SHA512

    f94af7c94d4b2ba1c5d98445d3b17af7a5b6a7bee28a33f132ba3fb95c89bdd1a8f08baf3c409c6ca494235f775abf137979e54eb104ba767f854b64cac72344

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDInWeNCYGyA2R7JxJAg8dtQ:ymb3NkkiQ3mdBjFIWeFGyAsJAg2Q

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      93487076b45f16fa3ddaa2a81793b0c1d85bcacb7a0d3b70d55555e7fba466f9

    • Size

      94KB

    • MD5

      70b43b60e16400939b9b137c7cfb09b5

    • SHA1

      80b1ebfb7a31e460001e3db91cfc8aa925ff015a

    • SHA256

      93487076b45f16fa3ddaa2a81793b0c1d85bcacb7a0d3b70d55555e7fba466f9

    • SHA512

      f94af7c94d4b2ba1c5d98445d3b17af7a5b6a7bee28a33f132ba3fb95c89bdd1a8f08baf3c409c6ca494235f775abf137979e54eb104ba767f854b64cac72344

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDInWeNCYGyA2R7JxJAg8dtQ:ymb3NkkiQ3mdBjFIWeFGyAsJAg2Q

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks