Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    3603e55f61dbab09496a2500337d24d2_JaffaCakes118

  • Size

    92KB

  • Sample

    240511-xec83aeh25

  • MD5

    3603e55f61dbab09496a2500337d24d2

  • SHA1

    3503e371d4c0ba4d3be57ec2beba973c063ae2cd

  • SHA256

    41ed94df272672323b3dcaba6860c90eb33999f8cd698f755993cd6f4e713bc5

  • SHA512

    ece454da89409fa57578b10e4a6c3443bd159921bdd952ae8e2adbcabfc62562bdaf375a139c28175bfbabd6bb8b5d6c86f9dd9e06b5646940eb4f2bf37cf9e8

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDWiekja1br3GGBxfot5lmKaZNkQL:ymb3NkkiQ3mdBjFWXkj7afo4ZERy

Malware Config

Targets

    • Target

      3603e55f61dbab09496a2500337d24d2_JaffaCakes118

    • Size

      92KB

    • MD5

      3603e55f61dbab09496a2500337d24d2

    • SHA1

      3503e371d4c0ba4d3be57ec2beba973c063ae2cd

    • SHA256

      41ed94df272672323b3dcaba6860c90eb33999f8cd698f755993cd6f4e713bc5

    • SHA512

      ece454da89409fa57578b10e4a6c3443bd159921bdd952ae8e2adbcabfc62562bdaf375a139c28175bfbabd6bb8b5d6c86f9dd9e06b5646940eb4f2bf37cf9e8

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDWiekja1br3GGBxfot5lmKaZNkQL:ymb3NkkiQ3mdBjFWXkj7afo4ZERy

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks