Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

7

0955b03418...cs.exe

windows7-x64

10

0955b03418...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0955b034185ede29391a9c4c2e484d70_NeikiAnalytics

  • Size

    273KB

  • Sample

    240509-1vyrgsgg3z

  • MD5

    0955b034185ede29391a9c4c2e484d70

  • SHA1

    cf286377f1e78f0fefa182b014f0ddd4ca2789c0

  • SHA256

    3f2647f59132238d4c5644bb2573c597c63569126f6b8b4e874e87b23b1e41aa

  • SHA512

    e552c7386360a670af663adc0e6dace9b2a0931bd7557bae7509a33d61e648a67a5bcc007791c4b35374fb733760fc52c918eed3b5673867db8f72b3444d0a27

  • SSDEEP

    6144:Ycm4FmowdHoSgWrXF5lpKGYV0aTk/BO0XJm4UEPOshN/xdKnvP48bm8:e4wFHoSgWjdpKGATTk/jYIOWN/KnnP3

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      0955b034185ede29391a9c4c2e484d70_NeikiAnalytics

    • Size

      273KB

    • MD5

      0955b034185ede29391a9c4c2e484d70

    • SHA1

      cf286377f1e78f0fefa182b014f0ddd4ca2789c0

    • SHA256

      3f2647f59132238d4c5644bb2573c597c63569126f6b8b4e874e87b23b1e41aa

    • SHA512

      e552c7386360a670af663adc0e6dace9b2a0931bd7557bae7509a33d61e648a67a5bcc007791c4b35374fb733760fc52c918eed3b5673867db8f72b3444d0a27

    • SSDEEP

      6144:Ycm4FmowdHoSgWrXF5lpKGYV0aTk/BO0XJm4UEPOshN/xdKnvP48bm8:e4wFHoSgWjdpKGATTk/jYIOWN/KnnP3

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks