Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

95e38d5475...83.exe

windows7-x64

10

95e38d5475...83.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    95e38d547513568277c8c00f1203433062c81238572d4c2a5b6b59f614254e83

  • Size

    59KB

  • Sample

    240612-bh3r8sxcrq

  • MD5

    0defae42a8f832681dd30359192a4cf7

  • SHA1

    4fe6f5baf91ee4267bc2577323fcfa3f3202c8a7

  • SHA256

    95e38d547513568277c8c00f1203433062c81238572d4c2a5b6b59f614254e83

  • SHA512

    3a357be71c232915caf2eca2d80a78e62ab19d4eca6215844fcc18b986769d979be9effb45b9e91d041be5c5584e277c4436aab0f33924c51a95d39029d19c98

  • SSDEEP

    1536:zvQBeOGtrYS3srx93UBWfwC6Ggnouy8iT4+IJPhbM9:zhOmTsF93UYfwC6GIoutiTm5hI9

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      95e38d547513568277c8c00f1203433062c81238572d4c2a5b6b59f614254e83

    • Size

      59KB

    • MD5

      0defae42a8f832681dd30359192a4cf7

    • SHA1

      4fe6f5baf91ee4267bc2577323fcfa3f3202c8a7

    • SHA256

      95e38d547513568277c8c00f1203433062c81238572d4c2a5b6b59f614254e83

    • SHA512

      3a357be71c232915caf2eca2d80a78e62ab19d4eca6215844fcc18b986769d979be9effb45b9e91d041be5c5584e277c4436aab0f33924c51a95d39029d19c98

    • SSDEEP

      1536:zvQBeOGtrYS3srx93UBWfwC6Ggnouy8iT4+IJPhbM9:zhOmTsF93UYfwC6GIoutiTm5hI9

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks