Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    55f561719d8c1c230446d304a8dc6cc0_NEAS

  • Size

    463KB

  • Sample

    240507-nehzwade7t

  • MD5

    55f561719d8c1c230446d304a8dc6cc0

  • SHA1

    3acd91b33e23f8e46f8a52bc0192b16d402d9cb3

  • SHA256

    b04619375c603a0087c03cfd14994081818487f7b1d685d18e68820da7b9d335

  • SHA512

    b8750ca9980cc0750f9a724301b65955e958f5693310f2261dc3358efbd5b99d6b46927678c3c2725434ae9bfaf62c9b6a9027dda8d85f0d58240515cc10045a

  • SSDEEP

    12288:J4wFHoSTeR0oQRkay+eFp3IDvSbh5nPVP+OKaf1V9:VeR0oykayRFp3lztP+OKaf1V9

Malware Config

Targets

    • Target

      55f561719d8c1c230446d304a8dc6cc0_NEAS

    • Size

      463KB

    • MD5

      55f561719d8c1c230446d304a8dc6cc0

    • SHA1

      3acd91b33e23f8e46f8a52bc0192b16d402d9cb3

    • SHA256

      b04619375c603a0087c03cfd14994081818487f7b1d685d18e68820da7b9d335

    • SHA512

      b8750ca9980cc0750f9a724301b65955e958f5693310f2261dc3358efbd5b99d6b46927678c3c2725434ae9bfaf62c9b6a9027dda8d85f0d58240515cc10045a

    • SSDEEP

      12288:J4wFHoSTeR0oQRkay+eFp3IDvSbh5nPVP+OKaf1V9:VeR0oykayRFp3lztP+OKaf1V9

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks