Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

5cb0d450d7...cs.exe

windows7-x64

10

5cb0d450d7...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5cb0d450d7fd92027c25253ab302a620_NeikiAnalytics

  • Size

    81KB

  • Sample

    240512-ct5xeafa76

  • MD5

    5cb0d450d7fd92027c25253ab302a620

  • SHA1

    4ad4fb3741a00afd67f522bf7b52843c068ba3e9

  • SHA256

    06435a78e67131cb48c0ed5383459395b4ac498d49b45995edebe32b6c2eeb15

  • SHA512

    47d9a8352453c467bebf78d28e7fa74f26c22f49e89e3c12413250f39bb8366291bba406da1837e55bffd72faa35d54394b5eaf07972300fc8e70c3a76118533

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDInWeNCYGyA2R7JkZPsvX:ymb3NkkiQ3mdBjFIWeFGyA9Pc

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      5cb0d450d7fd92027c25253ab302a620_NeikiAnalytics

    • Size

      81KB

    • MD5

      5cb0d450d7fd92027c25253ab302a620

    • SHA1

      4ad4fb3741a00afd67f522bf7b52843c068ba3e9

    • SHA256

      06435a78e67131cb48c0ed5383459395b4ac498d49b45995edebe32b6c2eeb15

    • SHA512

      47d9a8352453c467bebf78d28e7fa74f26c22f49e89e3c12413250f39bb8366291bba406da1837e55bffd72faa35d54394b5eaf07972300fc8e70c3a76118533

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDInWeNCYGyA2R7JkZPsvX:ymb3NkkiQ3mdBjFIWeFGyA9Pc

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks