Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

245b9a7d6d...ed.exe

windows7-x64

10

245b9a7d6d...ed.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    245b9a7d6db0293d516aa2b4b5fbe8431a736f209e84b7af13ceca1273b858ed

  • Size

    75KB

  • Sample

    240525-ydmxjsgc35

  • MD5

    0382fbb94d4a1ee4e9f47ead7877afbf

  • SHA1

    5c995479ff52d5a6136940365ab72f5add3fac49

  • SHA256

    245b9a7d6db0293d516aa2b4b5fbe8431a736f209e84b7af13ceca1273b858ed

  • SHA512

    41fc372d3cdab91985742a9d50c4c82b022eb1b14b3191e3a254e987f02b6c80c29b1ffc7598aba3ba43be9cf8c5249d78cb00e726aa115d9faa6a7771d29da4

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsIpWCz+FR4RzWqC5rINHB:ymb3NkkiQ3mdBjFIsIpZ+R4RzWqCuj

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      245b9a7d6db0293d516aa2b4b5fbe8431a736f209e84b7af13ceca1273b858ed

    • Size

      75KB

    • MD5

      0382fbb94d4a1ee4e9f47ead7877afbf

    • SHA1

      5c995479ff52d5a6136940365ab72f5add3fac49

    • SHA256

      245b9a7d6db0293d516aa2b4b5fbe8431a736f209e84b7af13ceca1273b858ed

    • SHA512

      41fc372d3cdab91985742a9d50c4c82b022eb1b14b3191e3a254e987f02b6c80c29b1ffc7598aba3ba43be9cf8c5249d78cb00e726aa115d9faa6a7771d29da4

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsIpWCz+FR4RzWqC5rINHB:ymb3NkkiQ3mdBjFIsIpZ+R4RzWqCuj

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks