Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

79b51ecad9...5e.exe

windows7-x64

10

79b51ecad9...5e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    79b51ecad9d4ce2f760b069ec18b96720e0037eef69c3b7d4fec6836628fc45e

  • Size

    1.2MB

  • Sample

    240611-3s93vawdnb

  • MD5

    19b9ea3682a72bd02ebb754b4765bdc0

  • SHA1

    33cc0c238a7395b91d4930d2055a03235a197241

  • SHA256

    79b51ecad9d4ce2f760b069ec18b96720e0037eef69c3b7d4fec6836628fc45e

  • SHA512

    fbc234656796e7701aaa05424ec3774786aea59528ac7e88c50d5a38f80b28e312bd51bc529054fa026f0b8c96071f87902e49cf0d6e08206f333dc415c3c7ca

  • SSDEEP

    24576:ShPh2kkkkK4kXkkkkkkkkhLX3a20R0v50+YNpsKv2EvZHp3oWt:4bazR0vKLXZ7

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      79b51ecad9d4ce2f760b069ec18b96720e0037eef69c3b7d4fec6836628fc45e

    • Size

      1.2MB

    • MD5

      19b9ea3682a72bd02ebb754b4765bdc0

    • SHA1

      33cc0c238a7395b91d4930d2055a03235a197241

    • SHA256

      79b51ecad9d4ce2f760b069ec18b96720e0037eef69c3b7d4fec6836628fc45e

    • SHA512

      fbc234656796e7701aaa05424ec3774786aea59528ac7e88c50d5a38f80b28e312bd51bc529054fa026f0b8c96071f87902e49cf0d6e08206f333dc415c3c7ca

    • SSDEEP

      24576:ShPh2kkkkK4kXkkkkkkkkhLX3a20R0v50+YNpsKv2EvZHp3oWt:4bazR0vKLXZ7

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks