Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

dd9fed63d0...b5.exe

windows7-x64

10

dd9fed63d0...b5.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dd9fed63d002946d36344b00681be29e53cadfaa64f1fe47794c60705204b9b5

  • Size

    275KB

  • Sample

    240501-epn47she82

  • MD5

    3da3150a505252aee5fecf958daaedaa

  • SHA1

    8d51a5ba51740a99e699d6fa16e0b262785011d0

  • SHA256

    dd9fed63d002946d36344b00681be29e53cadfaa64f1fe47794c60705204b9b5

  • SHA512

    39e6ec6811de36127337a7781fb713cb87ef1687434cffa6a8505d8d660b4a4db46683d125888ebf8ddbb4303a98bde4abe44025af90022fe5b8e9da85998ffd

  • SSDEEP

    6144:ncm4FmowdHoS6rW3NNTvBu6wo2J4JAgNXkArR/rtXOLtu4J6KvvLp3OKtUuuuTE/:14wFHoSeM/Tpu6w14JAOkIRhOBu4Jhvc

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      dd9fed63d002946d36344b00681be29e53cadfaa64f1fe47794c60705204b9b5

    • Size

      275KB

    • MD5

      3da3150a505252aee5fecf958daaedaa

    • SHA1

      8d51a5ba51740a99e699d6fa16e0b262785011d0

    • SHA256

      dd9fed63d002946d36344b00681be29e53cadfaa64f1fe47794c60705204b9b5

    • SHA512

      39e6ec6811de36127337a7781fb713cb87ef1687434cffa6a8505d8d660b4a4db46683d125888ebf8ddbb4303a98bde4abe44025af90022fe5b8e9da85998ffd

    • SSDEEP

      6144:ncm4FmowdHoS6rW3NNTvBu6wo2J4JAgNXkArR/rtXOLtu4J6KvvLp3OKtUuuuTE/:14wFHoSeM/Tpu6w14JAOkIRhOBu4Jhvc

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks