Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    97c8dce5eaa422427078b9297bb052b061e374bed7a4437b0e4782c6464fddd2

  • Size

    969KB

  • Sample

    240708-bz8d2swemn

  • MD5

    f49bb95143e5fb3b58a87db51162f783

  • SHA1

    f628662ee3bc57c80f9b3fdc4e208a49359790f7

  • SHA256

    97c8dce5eaa422427078b9297bb052b061e374bed7a4437b0e4782c6464fddd2

  • SHA512

    34ffe034c7e7f2175361bb1d0b0eac1d64d21c9318332dddb157796a6073da2e5dc5537485c3c62c4dcbad38c72a12e0c0cc683fde87d4906fcf98795440a439

  • SSDEEP

    12288:n3C9ytvngQjy3C9I3YEWpYe+GalTLfOX+I3C9S3C9ytvngQj65syLr9fuWp6:SgdnJVwLgdnJq9fu5

Malware Config

Targets

    • Target

      97c8dce5eaa422427078b9297bb052b061e374bed7a4437b0e4782c6464fddd2

    • Size

      969KB

    • MD5

      f49bb95143e5fb3b58a87db51162f783

    • SHA1

      f628662ee3bc57c80f9b3fdc4e208a49359790f7

    • SHA256

      97c8dce5eaa422427078b9297bb052b061e374bed7a4437b0e4782c6464fddd2

    • SHA512

      34ffe034c7e7f2175361bb1d0b0eac1d64d21c9318332dddb157796a6073da2e5dc5537485c3c62c4dcbad38c72a12e0c0cc683fde87d4906fcf98795440a439

    • SSDEEP

      12288:n3C9ytvngQjy3C9I3YEWpYe+GalTLfOX+I3C9S3C9ytvngQj65syLr9fuWp6:SgdnJVwLgdnJq9fu5

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks