Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    c580da6ec82171b892137234ef2d2280_NeikiAnalytics

  • Size

    537KB

  • Sample

    240516-j4cryaca34

  • MD5

    c580da6ec82171b892137234ef2d2280

  • SHA1

    ee265d8c6504e4566e1e38ee8413740a5f24539a

  • SHA256

    aada36086bc7822fbb827e231175390923f3227c32785402037d6bec5329f03f

  • SHA512

    11faee45de96c41a0656047854d69ad5a7e6464475fd2ae632b0fc04e961f320e6e72e41be281ae9ec5cb230ae90ec09153324d4ec1569b2bf03b8cde25df70d

  • SSDEEP

    12288:y4wFHoS3eFp3IDvSbh5nP+UbGTHoSouKs8N0u/D6vIZ6:HFp3lzZbGa5so6

Malware Config

Targets

    • Target

      c580da6ec82171b892137234ef2d2280_NeikiAnalytics

    • Size

      537KB

    • MD5

      c580da6ec82171b892137234ef2d2280

    • SHA1

      ee265d8c6504e4566e1e38ee8413740a5f24539a

    • SHA256

      aada36086bc7822fbb827e231175390923f3227c32785402037d6bec5329f03f

    • SHA512

      11faee45de96c41a0656047854d69ad5a7e6464475fd2ae632b0fc04e961f320e6e72e41be281ae9ec5cb230ae90ec09153324d4ec1569b2bf03b8cde25df70d

    • SSDEEP

      12288:y4wFHoS3eFp3IDvSbh5nP+UbGTHoSouKs8N0u/D6vIZ6:HFp3lzZbGa5so6

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks