Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    49dd126b95b6c3c8cc62af024581c790_NeikiAnalytics

  • Size

    81KB

  • Sample

    240510-cqa8magd93

  • MD5

    49dd126b95b6c3c8cc62af024581c790

  • SHA1

    6aa6320eadd7ea0493ebfbc28c451281d56c2944

  • SHA256

    f6718eefeb9881ba5b76a42fe7b5aea1b4b69c7b83f8642903c4ceade420f08d

  • SHA512

    0020a1155618b15690d017eb0735d4f2f51c935a049255568e44d8f1b9f940f87a93626280f009af3e93c4a52b5b6e1d70ca1cd60fd6d933acaa7efd6d46f959

  • SSDEEP

    1536:CvQBeOGtrYS3srx93UBWfwC6Ggnouy8AelS7/7VIQH8:ChOmTsF93UYfwC6GIoutAe07zVIq8

Malware Config

Targets

    • Target

      49dd126b95b6c3c8cc62af024581c790_NeikiAnalytics

    • Size

      81KB

    • MD5

      49dd126b95b6c3c8cc62af024581c790

    • SHA1

      6aa6320eadd7ea0493ebfbc28c451281d56c2944

    • SHA256

      f6718eefeb9881ba5b76a42fe7b5aea1b4b69c7b83f8642903c4ceade420f08d

    • SHA512

      0020a1155618b15690d017eb0735d4f2f51c935a049255568e44d8f1b9f940f87a93626280f009af3e93c4a52b5b6e1d70ca1cd60fd6d933acaa7efd6d46f959

    • SSDEEP

      1536:CvQBeOGtrYS3srx93UBWfwC6Ggnouy8AelS7/7VIQH8:ChOmTsF93UYfwC6GIoutAe07zVIq8

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks