Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

296e5dd8e8...0N.exe

windows7-x64

10

296e5dd8e8...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    296e5dd8e88e5755ef56d38c72b77a50N.exe

  • Size

    75KB

  • Sample

    240709-el2wwsxeqf

  • MD5

    296e5dd8e88e5755ef56d38c72b77a50

  • SHA1

    3b6047ef632279b191ef13c9875c195e29271575

  • SHA256

    89af54504034535d5de80f28b00522b96ba18fa7b20d2d63626f835f334de5b0

  • SHA512

    a638d922c9656485708a1cf371c801cba896c6eb3be0c28547209ef9899fc7b3c3948be1dad1c9bbc906f538dbf4d745eaefa2691fac16b5d8e6f6c52535fce1

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIfv7+afCD+QsQbKQPEU:ymb3NkkiQ3mdBjFIfvTfCD+HlQcU

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      296e5dd8e88e5755ef56d38c72b77a50N.exe

    • Size

      75KB

    • MD5

      296e5dd8e88e5755ef56d38c72b77a50

    • SHA1

      3b6047ef632279b191ef13c9875c195e29271575

    • SHA256

      89af54504034535d5de80f28b00522b96ba18fa7b20d2d63626f835f334de5b0

    • SHA512

      a638d922c9656485708a1cf371c801cba896c6eb3be0c28547209ef9899fc7b3c3948be1dad1c9bbc906f538dbf4d745eaefa2691fac16b5d8e6f6c52535fce1

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIfv7+afCD+QsQbKQPEU:ymb3NkkiQ3mdBjFIfvTfCD+HlQcU

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks