Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

8cf49fb36b...cs.exe

windows7-x64

10

8cf49fb36b...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8cf49fb36ba7877d2a6507fb8d7087c0_NeikiAnalytics.exe

  • Size

    105KB

  • Sample

    240601-eql18she21

  • MD5

    8cf49fb36ba7877d2a6507fb8d7087c0

  • SHA1

    a9c7e49481ed62eac53a0db7175c91ab796a51b8

  • SHA256

    b8772df95e941b06040c9fb9ab27e41c1032b0a1b0d2c78909e4c419a1d5eccf

  • SHA512

    99c8fe53121bcd2c36b10b961a83c61e44373c1c905ad3c730ce1b1a9ef263ee7d82d3e97a373e9ea035b192a7e68aab07a426a1c9b237f2969d6b343ce8c006

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDoTNKDeS98hPUdHV7RNzfJNI:ymb3NkkiQ3mdBjFo5KDe88g1fDI

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      8cf49fb36ba7877d2a6507fb8d7087c0_NeikiAnalytics.exe

    • Size

      105KB

    • MD5

      8cf49fb36ba7877d2a6507fb8d7087c0

    • SHA1

      a9c7e49481ed62eac53a0db7175c91ab796a51b8

    • SHA256

      b8772df95e941b06040c9fb9ab27e41c1032b0a1b0d2c78909e4c419a1d5eccf

    • SHA512

      99c8fe53121bcd2c36b10b961a83c61e44373c1c905ad3c730ce1b1a9ef263ee7d82d3e97a373e9ea035b192a7e68aab07a426a1c9b237f2969d6b343ce8c006

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDoTNKDeS98hPUdHV7RNzfJNI:ymb3NkkiQ3mdBjFo5KDe88g1fDI

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks