Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

9f295b556f...7b.exe

windows7-x64

10

9f295b556f...7b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9f295b556f1731c0355b778e9a6c61b7ef6c4773451886592a9839aadc63f77b

  • Size

    9.2MB

  • Sample

    240603-hjdytsgd28

  • MD5

    220d436be62924e45fc4e7a08cb590bf

  • SHA1

    f55c9e0c26d096104bac7ff081e9673223500ac8

  • SHA256

    9f295b556f1731c0355b778e9a6c61b7ef6c4773451886592a9839aadc63f77b

  • SHA512

    8de4b59d3b7628f75ca6e0f2760e200425d5c14f926100c93caaf642865e39e93ef12eec90d0691ab4c66daabe7046c2e77d1c3e48c8ebc527759c6b74898004

  • SSDEEP

    196608:10/mSzMt7DznB220+69n/yzELjK+7i7/qv+Tfp4K:iOTt7DznB7l69/O+7i7C2TfpN

Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target

      9f295b556f1731c0355b778e9a6c61b7ef6c4773451886592a9839aadc63f77b

    • Size

      9.2MB

    • MD5

      220d436be62924e45fc4e7a08cb590bf

    • SHA1

      f55c9e0c26d096104bac7ff081e9673223500ac8

    • SHA256

      9f295b556f1731c0355b778e9a6c61b7ef6c4773451886592a9839aadc63f77b

    • SHA512

      8de4b59d3b7628f75ca6e0f2760e200425d5c14f926100c93caaf642865e39e93ef12eec90d0691ab4c66daabe7046c2e77d1c3e48c8ebc527759c6b74898004

    • SSDEEP

      196608:10/mSzMt7DznB220+69n/yzELjK+7i7/qv+Tfp4K:iOTt7DznB7l69/O+7i7C2TfpN

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks