Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    25d9cbbdbb52b1c236b517884fae28ef_JaffaCakes118

  • Size

    377KB

  • Sample

    240508-vm5beaee5t

  • MD5

    25d9cbbdbb52b1c236b517884fae28ef

  • SHA1

    c8274516ccc464203f1541cd3a25c2c4e9e96482

  • SHA256

    2af3b94af46618ff14c9597e22f42a8b75a7dccbb5e0a7ca6eb5bb156e9bffb4

  • SHA512

    e905854181fba867fedb6445221fe29fcf4d5a718015936ab9599f5bbe4b7dfb0aa04261027b914653cac2b6066a86b05a803c9ae5cc264e6ba61c6d7e4d2b31

  • SSDEEP

    3072:8hOm2sI93UufdC67cimD5t251UrRE9TTFw8TCK:8cm7ImGddXmNt251UriZFwGCK

Malware Config

Targets

    • Target

      25d9cbbdbb52b1c236b517884fae28ef_JaffaCakes118

    • Size

      377KB

    • MD5

      25d9cbbdbb52b1c236b517884fae28ef

    • SHA1

      c8274516ccc464203f1541cd3a25c2c4e9e96482

    • SHA256

      2af3b94af46618ff14c9597e22f42a8b75a7dccbb5e0a7ca6eb5bb156e9bffb4

    • SHA512

      e905854181fba867fedb6445221fe29fcf4d5a718015936ab9599f5bbe4b7dfb0aa04261027b914653cac2b6066a86b05a803c9ae5cc264e6ba61c6d7e4d2b31

    • SSDEEP

      3072:8hOm2sI93UufdC67cimD5t251UrRE9TTFw8TCK:8cm7ImGddXmNt251UriZFwGCK

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks