Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

b9f012cfcf...d0.exe

windows7-x64

10

b9f012cfcf...d0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b9f012cfcf7775fb1d894ef74675ca3f95b80029bbc62b470e2fc567bff9dfd0

  • Size

    341KB

  • Sample

    240617-bwwabascpr

  • MD5

    4c3cc2f31ba695dcadd8c6294c09b196

  • SHA1

    d8bfcb1ce535b26505d4b6ba8393efb523302c8b

  • SHA256

    b9f012cfcf7775fb1d894ef74675ca3f95b80029bbc62b470e2fc567bff9dfd0

  • SHA512

    7458a2a6d0c9a9bf79942d9b03a87334055f4e409a6f4ce81316d2edaa56ee33a5dece0cab57b8a0d894f4f448162844923c9a2e8e590de4282c4306be02f31c

  • SSDEEP

    6144:Xcm7ImGddXgYW5fNZWB5hFfci3Add4kGYA+:l7TcbWXZshJX2VGd+

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      b9f012cfcf7775fb1d894ef74675ca3f95b80029bbc62b470e2fc567bff9dfd0

    • Size

      341KB

    • MD5

      4c3cc2f31ba695dcadd8c6294c09b196

    • SHA1

      d8bfcb1ce535b26505d4b6ba8393efb523302c8b

    • SHA256

      b9f012cfcf7775fb1d894ef74675ca3f95b80029bbc62b470e2fc567bff9dfd0

    • SHA512

      7458a2a6d0c9a9bf79942d9b03a87334055f4e409a6f4ce81316d2edaa56ee33a5dece0cab57b8a0d894f4f448162844923c9a2e8e590de4282c4306be02f31c

    • SSDEEP

      6144:Xcm7ImGddXgYW5fNZWB5hFfci3Add4kGYA+:l7TcbWXZshJX2VGd+

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks