Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

e31d602599...10.exe

windows7-x64

10

e31d602599...10.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e31d6025997bb78485544193c717463169b67fef14c9eb4d4a1757ae6392c610

  • Size

    69KB

  • Sample

    240529-dyc8mahe66

  • MD5

    0e5b4dd9bd0795cd41b88a1d343047fb

  • SHA1

    f98a197ad2f366aa65d3c102d425189158b110cc

  • SHA256

    e31d6025997bb78485544193c717463169b67fef14c9eb4d4a1757ae6392c610

  • SHA512

    af7fa431ce6a7735fa7f3cb5b8dc53ef372aefede01fb282ac82f06373a5f44cd8fc0914ea96fefba53e1da33d03c46c5b1e09318d47a027a163b91b82754761

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIfv7+afCD+QsQbu0:ymb3NkkiQ3mdBjFIfvTfCD+HU

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      e31d6025997bb78485544193c717463169b67fef14c9eb4d4a1757ae6392c610

    • Size

      69KB

    • MD5

      0e5b4dd9bd0795cd41b88a1d343047fb

    • SHA1

      f98a197ad2f366aa65d3c102d425189158b110cc

    • SHA256

      e31d6025997bb78485544193c717463169b67fef14c9eb4d4a1757ae6392c610

    • SHA512

      af7fa431ce6a7735fa7f3cb5b8dc53ef372aefede01fb282ac82f06373a5f44cd8fc0914ea96fefba53e1da33d03c46c5b1e09318d47a027a163b91b82754761

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIfv7+afCD+QsQbu0:ymb3NkkiQ3mdBjFIfvTfCD+HU

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks