Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

7c164f7953...66.exe

windows7-x64

10

7c164f7953...66.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7c164f79531d3c2e02c117f04f4ba087f450e5281552e7a2e833faa7c0ca7566

  • Size

    77KB

  • Sample

    240601-27w9vsah67

  • MD5

    7eca1619dc0b3af265d2f918a8ab6b7a

  • SHA1

    6d3484b570ae4e8e43088425b60085e6a8f271ff

  • SHA256

    7c164f79531d3c2e02c117f04f4ba087f450e5281552e7a2e833faa7c0ca7566

  • SHA512

    217ee96b2cd881106e178b6bf2c59b9e7a9e6b6095fbede86811944da70f2ddc25ef83332d8649c11aa4d1f898a32cf55a3765630a72fc66ebfbd295464d552f

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDoAX8YieVIJclPvPJtcdcY:ymb3NkkiQ3mdBjFo68YBVIJc9JtxY

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      7c164f79531d3c2e02c117f04f4ba087f450e5281552e7a2e833faa7c0ca7566

    • Size

      77KB

    • MD5

      7eca1619dc0b3af265d2f918a8ab6b7a

    • SHA1

      6d3484b570ae4e8e43088425b60085e6a8f271ff

    • SHA256

      7c164f79531d3c2e02c117f04f4ba087f450e5281552e7a2e833faa7c0ca7566

    • SHA512

      217ee96b2cd881106e178b6bf2c59b9e7a9e6b6095fbede86811944da70f2ddc25ef83332d8649c11aa4d1f898a32cf55a3765630a72fc66ebfbd295464d552f

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDoAX8YieVIJclPvPJtcdcY:ymb3NkkiQ3mdBjFo68YBVIJc9JtxY

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks