Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    245b9a7d6db0293d516aa2b4b5fbe8431a736f209e84b7af13ceca1273b858ed

  • Size

    75KB

  • Sample

    240525-ydmxjsgc35

  • MD5

    0382fbb94d4a1ee4e9f47ead7877afbf

  • SHA1

    5c995479ff52d5a6136940365ab72f5add3fac49

  • SHA256

    245b9a7d6db0293d516aa2b4b5fbe8431a736f209e84b7af13ceca1273b858ed

  • SHA512

    41fc372d3cdab91985742a9d50c4c82b022eb1b14b3191e3a254e987f02b6c80c29b1ffc7598aba3ba43be9cf8c5249d78cb00e726aa115d9faa6a7771d29da4

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsIpWCz+FR4RzWqC5rINHB:ymb3NkkiQ3mdBjFIsIpZ+R4RzWqCuj

Malware Config

Targets

    • Target

      245b9a7d6db0293d516aa2b4b5fbe8431a736f209e84b7af13ceca1273b858ed

    • Size

      75KB

    • MD5

      0382fbb94d4a1ee4e9f47ead7877afbf

    • SHA1

      5c995479ff52d5a6136940365ab72f5add3fac49

    • SHA256

      245b9a7d6db0293d516aa2b4b5fbe8431a736f209e84b7af13ceca1273b858ed

    • SHA512

      41fc372d3cdab91985742a9d50c4c82b022eb1b14b3191e3a254e987f02b6c80c29b1ffc7598aba3ba43be9cf8c5249d78cb00e726aa115d9faa6a7771d29da4

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsIpWCz+FR4RzWqC5rINHB:ymb3NkkiQ3mdBjFIsIpZ+R4RzWqCuj

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks