Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

7

45ad4a2255...KI.exe

windows7-x64

10

45ad4a2255...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    45ad4a225521a820122f30c93a1a1880_NEIKI

  • Size

    441KB

  • Sample

    240507-1trlsacf95

  • MD5

    45ad4a225521a820122f30c93a1a1880

  • SHA1

    a25c29353069b78a00d308fdf17f8f0ecd2f5d82

  • SHA256

    8eb76559650e76d1019b09d77bf25267d9677410a14bb61ec31c30931e85b331

  • SHA512

    d757b16f9abfc5a1ed3cdec65f3dfc177f897a2f953253cf6ea26908ead990156175a965703439db0837242705a729fe531d5c81c591e69282c7588fe5232238

  • SSDEEP

    12288:M4wFHoSpg4wFHonR/nPF2LnFL4wF04wFK4wFK4wlu3:UrR/nPW

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      45ad4a225521a820122f30c93a1a1880_NEIKI

    • Size

      441KB

    • MD5

      45ad4a225521a820122f30c93a1a1880

    • SHA1

      a25c29353069b78a00d308fdf17f8f0ecd2f5d82

    • SHA256

      8eb76559650e76d1019b09d77bf25267d9677410a14bb61ec31c30931e85b331

    • SHA512

      d757b16f9abfc5a1ed3cdec65f3dfc177f897a2f953253cf6ea26908ead990156175a965703439db0837242705a729fe531d5c81c591e69282c7588fe5232238

    • SSDEEP

      12288:M4wFHoSpg4wFHonR/nPF2LnFL4wF04wFK4wFK4wlu3:UrR/nPW

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks