Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    699dcdd12472bad708eee49a8b91bf144dac7cbee9f85e38e6aef29e5828cf1a.exe

  • Size

    387KB

  • Sample

    240530-1pcl3abg72

  • MD5

    09703ac57af97c8a50a93b9d653b45c2

  • SHA1

    8fbd8a5e21263923dd75936ffe461fca19a36aa4

  • SHA256

    699dcdd12472bad708eee49a8b91bf144dac7cbee9f85e38e6aef29e5828cf1a

  • SHA512

    13354f6bb7327e81916927b38fba584e4b21217b67873a6f78576ab37cfc3eb7ce32e2f5bcbb912d1932140797a6448faa15fddf0574f92fea17adcf7eb444b3

  • SSDEEP

    6144:n3C9BRIG0asYFm71mPfkVB8dKwaO5CVwthY0:n3C9uYA7okVqdKwaO5CVMhb

Malware Config

Targets

    • Target

      699dcdd12472bad708eee49a8b91bf144dac7cbee9f85e38e6aef29e5828cf1a.exe

    • Size

      387KB

    • MD5

      09703ac57af97c8a50a93b9d653b45c2

    • SHA1

      8fbd8a5e21263923dd75936ffe461fca19a36aa4

    • SHA256

      699dcdd12472bad708eee49a8b91bf144dac7cbee9f85e38e6aef29e5828cf1a

    • SHA512

      13354f6bb7327e81916927b38fba584e4b21217b67873a6f78576ab37cfc3eb7ce32e2f5bcbb912d1932140797a6448faa15fddf0574f92fea17adcf7eb444b3

    • SSDEEP

      6144:n3C9BRIG0asYFm71mPfkVB8dKwaO5CVwthY0:n3C9uYA7okVqdKwaO5CVMhb

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks