Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    10d4a15bca794b6ef16152907fa0ab9d_JaffaCakes118

  • Size

    211KB

  • Sample

    240503-stblkada43

  • MD5

    10d4a15bca794b6ef16152907fa0ab9d

  • SHA1

    d78da5933b9c51cc1c2cef17914a0e4663cc1712

  • SHA256

    f05ad4441a6258ae559e1e6a499bd2a10d68ace224372e82322e6ac5fde4bb07

  • SHA512

    622fc9034f68fcd7667812b677442f9d348f96b3de41ca0bd5715abd6550ead6cf17f6552abb8c5d432e72cdb8caffd7e9555766c8dc2d75886329f2642eec8a

  • SSDEEP

    3072:PhOm2sI93UufdC67cihfmCiiiXAQ5lpBoGs:Pcm7ImGddXtWrXF5lpKGs

Malware Config

Targets

    • Target

      10d4a15bca794b6ef16152907fa0ab9d_JaffaCakes118

    • Size

      211KB

    • MD5

      10d4a15bca794b6ef16152907fa0ab9d

    • SHA1

      d78da5933b9c51cc1c2cef17914a0e4663cc1712

    • SHA256

      f05ad4441a6258ae559e1e6a499bd2a10d68ace224372e82322e6ac5fde4bb07

    • SHA512

      622fc9034f68fcd7667812b677442f9d348f96b3de41ca0bd5715abd6550ead6cf17f6552abb8c5d432e72cdb8caffd7e9555766c8dc2d75886329f2642eec8a

    • SSDEEP

      3072:PhOm2sI93UufdC67cihfmCiiiXAQ5lpBoGs:Pcm7ImGddXtWrXF5lpKGs

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks