Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

6c1381517c...cs.exe

windows7-x64

10

6c1381517c...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6c1381517c4540ec3eea864fefd62100_NeikiAnalytics.exe

  • Size

    67KB

  • Sample

    240517-a2562ahe2z

  • MD5

    6c1381517c4540ec3eea864fefd62100

  • SHA1

    a7fc3cd1ddc597df3425f06e82896a93b136e57b

  • SHA256

    9110b671c34043162139d93d7954e811e3fc4e2ae41dd07b29591e750af8d6c8

  • SHA512

    ce9fb1b26cd64381a9f45ff1bbf888ac082cad631143fac8384ef709f19159ca02a56e2a56a0b56cf57fea484500ad90532f2196441ce590713f9a301d841570

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND0yUPqrDZF:ymb3NkkiQ3mdBjF0yUmr

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      6c1381517c4540ec3eea864fefd62100_NeikiAnalytics.exe

    • Size

      67KB

    • MD5

      6c1381517c4540ec3eea864fefd62100

    • SHA1

      a7fc3cd1ddc597df3425f06e82896a93b136e57b

    • SHA256

      9110b671c34043162139d93d7954e811e3fc4e2ae41dd07b29591e750af8d6c8

    • SHA512

      ce9fb1b26cd64381a9f45ff1bbf888ac082cad631143fac8384ef709f19159ca02a56e2a56a0b56cf57fea484500ad90532f2196441ce590713f9a301d841570

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND0yUPqrDZF:ymb3NkkiQ3mdBjF0yUmr

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks