Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

ac9f623127...69.exe

windows7-x64

10

ac9f623127...69.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ac9f6231276a5ab76fc16a4200f3de4f6a49c0d087e62eacffa61aaa010cc069

  • Size

    192KB

  • Sample

    240630-a9w84a1cjb

  • MD5

    36ef18928d4b97ce244315c0a6ec4d49

  • SHA1

    5fe5371c3002cacaa95fd17e8d339c4f346c277e

  • SHA256

    ac9f6231276a5ab76fc16a4200f3de4f6a49c0d087e62eacffa61aaa010cc069

  • SHA512

    ecd05ddf6bf9314f7ba6d3cbf24924ceb64d8a9f913b05eaf53c028a11389122b42339ac7eb2a897d03dedb22afbf5f0e976c11f6ad7d746c9c1be582f8237ba

  • SSDEEP

    3072:YhOmTsF93UYfwC6GIoutLmxHxae5yLpcgDE4JBuItR8pTsgnKbQFe3+3Q:Ycm4FmowdHoSLEaTBftapTsyFeO3Q

Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target

      ac9f6231276a5ab76fc16a4200f3de4f6a49c0d087e62eacffa61aaa010cc069

    • Size

      192KB

    • MD5

      36ef18928d4b97ce244315c0a6ec4d49

    • SHA1

      5fe5371c3002cacaa95fd17e8d339c4f346c277e

    • SHA256

      ac9f6231276a5ab76fc16a4200f3de4f6a49c0d087e62eacffa61aaa010cc069

    • SHA512

      ecd05ddf6bf9314f7ba6d3cbf24924ceb64d8a9f913b05eaf53c028a11389122b42339ac7eb2a897d03dedb22afbf5f0e976c11f6ad7d746c9c1be582f8237ba

    • SSDEEP

      3072:YhOmTsF93UYfwC6GIoutLmxHxae5yLpcgDE4JBuItR8pTsgnKbQFe3+3Q:Ycm4FmowdHoSLEaTBftapTsyFeO3Q

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks