Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    3672f3185ad30da7798a6e883acd9c3aee354873d5590b2fa34b9d440e792c5b

  • Size

    308KB

  • Sample

    240706-zbrndssblk

  • MD5

    2608d8efd6e184807ab856a47bc1dba7

  • SHA1

    313a38d083127581f6d06f60857a25404fc76584

  • SHA256

    3672f3185ad30da7798a6e883acd9c3aee354873d5590b2fa34b9d440e792c5b

  • SHA512

    79628149c622641f87f27e94f8137131e7f8cacb53bbb510fecbd6a37d6b37cdff42bae3864763a679f91a8f0f87015221c06cddb80514e6349cf3a77386dff5

  • SSDEEP

    6144:n3C9BRo/CH26ZAmaOXicLrnRukAPXt1UP+3OgEbXeTiDSd2vJ:n3C9uUnAvtd3Ogld2vJ

Malware Config

Targets

    • Target

      3672f3185ad30da7798a6e883acd9c3aee354873d5590b2fa34b9d440e792c5b

    • Size

      308KB

    • MD5

      2608d8efd6e184807ab856a47bc1dba7

    • SHA1

      313a38d083127581f6d06f60857a25404fc76584

    • SHA256

      3672f3185ad30da7798a6e883acd9c3aee354873d5590b2fa34b9d440e792c5b

    • SHA512

      79628149c622641f87f27e94f8137131e7f8cacb53bbb510fecbd6a37d6b37cdff42bae3864763a679f91a8f0f87015221c06cddb80514e6349cf3a77386dff5

    • SSDEEP

      6144:n3C9BRo/CH26ZAmaOXicLrnRukAPXt1UP+3OgEbXeTiDSd2vJ:n3C9uUnAvtd3Ogld2vJ

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks