Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

d379a32830...7a.exe

windows7-x64

10

d379a32830...7a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d379a32830fb5a8a682736d98f9bf63d6040bf68d50d66c23a82b27582b2217a

  • Size

    4.9MB

  • Sample

    240628-qpf95svckm

  • MD5

    0bfe0c10d538ff7dab1724b643cae52c

  • SHA1

    b1f865d76f7c8bacd3e9c0152102493a251ff69e

  • SHA256

    d379a32830fb5a8a682736d98f9bf63d6040bf68d50d66c23a82b27582b2217a

  • SHA512

    3d2ae801896cd2c6cb54d34b5ebd8634e7b81846d6271a1885fc48350fab450bdbdd063e1e6993719f05533ccc829f2dc10aaa069182965955de00058462d5f7

  • SSDEEP

    49152:2cVQMEp7hDOqWSfAQ2CLMjb01IW17YWWfRGz53wJWqb2NA:pQH7HWh5CLkb0Z17YWWfaEONA

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      d379a32830fb5a8a682736d98f9bf63d6040bf68d50d66c23a82b27582b2217a

    • Size

      4.9MB

    • MD5

      0bfe0c10d538ff7dab1724b643cae52c

    • SHA1

      b1f865d76f7c8bacd3e9c0152102493a251ff69e

    • SHA256

      d379a32830fb5a8a682736d98f9bf63d6040bf68d50d66c23a82b27582b2217a

    • SHA512

      3d2ae801896cd2c6cb54d34b5ebd8634e7b81846d6271a1885fc48350fab450bdbdd063e1e6993719f05533ccc829f2dc10aaa069182965955de00058462d5f7

    • SSDEEP

      49152:2cVQMEp7hDOqWSfAQ2CLMjb01IW17YWWfRGz53wJWqb2NA:pQH7HWh5CLkb0Z17YWWfaEONA

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks