Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

ed5d0cae40...KI.exe

windows7-x64

10

ed5d0cae40...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ed5d0cae4083465925ba0602c82fc9c0_NEIKI

  • Size

    95KB

  • Sample

    240508-ssksvaah4z

  • MD5

    ed5d0cae4083465925ba0602c82fc9c0

  • SHA1

    4971b37abd9b9a064b1ba4dcc2db759b16d7d5bc

  • SHA256

    49d3f219d99cc969cab53cade411d4d5d1f67d46305d6b73cf08b22f6307b9a0

  • SHA512

    bd68118213fb1b206cbdc94f1afed17130dd49e2e148ead9237090b5d8d5f2d9ff0c867f98feb93b0e7158fdd8c8d4d481db6e28747976272fe2505b19a87aa6

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDo73XH/YP1HFrJximAAxS1rj/2CC:ymb3NkkiQ3mdBjFo73PYP1lri3K8GwyV

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      ed5d0cae4083465925ba0602c82fc9c0_NEIKI

    • Size

      95KB

    • MD5

      ed5d0cae4083465925ba0602c82fc9c0

    • SHA1

      4971b37abd9b9a064b1ba4dcc2db759b16d7d5bc

    • SHA256

      49d3f219d99cc969cab53cade411d4d5d1f67d46305d6b73cf08b22f6307b9a0

    • SHA512

      bd68118213fb1b206cbdc94f1afed17130dd49e2e148ead9237090b5d8d5f2d9ff0c867f98feb93b0e7158fdd8c8d4d481db6e28747976272fe2505b19a87aa6

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDo73XH/YP1HFrJximAAxS1rj/2CC:ymb3NkkiQ3mdBjFo73PYP1lri3K8GwyV

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks