Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    7b2edcffe6d1fe99cc269ad3e10438f9ece03f89034b02fc1397a7ed06fabb47

  • Size

    1.9MB

  • Sample

    240615-27pj1sydpf

  • MD5

    da717e4516d9e395c688c03ff542a077

  • SHA1

    fbed84037afdbe62b6ae3d258e52b2484be2b59e

  • SHA256

    7b2edcffe6d1fe99cc269ad3e10438f9ece03f89034b02fc1397a7ed06fabb47

  • SHA512

    db6435b9c86d0034865e153c56f769964d5408785d5c7f3fcf7360a132dde54d8b7a4dea553f6e5678df1bb81006f2a79e84e2bb7d750e87bdc756cab30aed3b

  • SSDEEP

    24576:BWBlBCPmxP4rquXSHQ4gZ4xNISlRlYpJv0LdeVu6nM5fpCJ6DfVC/iUE9Q27t9Rz:cNCm80hRmfeZQJX/Tm

Malware Config

Targets

    • Target

      7b2edcffe6d1fe99cc269ad3e10438f9ece03f89034b02fc1397a7ed06fabb47

    • Size

      1.9MB

    • MD5

      da717e4516d9e395c688c03ff542a077

    • SHA1

      fbed84037afdbe62b6ae3d258e52b2484be2b59e

    • SHA256

      7b2edcffe6d1fe99cc269ad3e10438f9ece03f89034b02fc1397a7ed06fabb47

    • SHA512

      db6435b9c86d0034865e153c56f769964d5408785d5c7f3fcf7360a132dde54d8b7a4dea553f6e5678df1bb81006f2a79e84e2bb7d750e87bdc756cab30aed3b

    • SSDEEP

      24576:BWBlBCPmxP4rquXSHQ4gZ4xNISlRlYpJv0LdeVu6nM5fpCJ6DfVC/iUE9Q27t9Rz:cNCm80hRmfeZQJX/Tm

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks