Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    276b56bc68499a0f87e0abebdf89b490N.exe

  • Size

    484KB

  • Sample

    240712-ctxwssxcle

  • MD5

    276b56bc68499a0f87e0abebdf89b490

  • SHA1

    47bc5156d6123cb1cff4ccd64890544ccb4952a3

  • SHA256

    ed0861e403c3329f3071cf935abaecaaec5aa078a395314b9b52b6da3c6c4e5b

  • SHA512

    710d61b520e40bb9071034da24761779e7ebbeb4c929210b5ff04140c4cdb0be87eb5a0727c0021fcd9b3a1a48ba040c83ec905ab4982d43022e4ca87b0d6742

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwu1b26X1wjhtSizjp:q7Tc2NYHUrAwqzc/

Malware Config

Targets

    • Target

      276b56bc68499a0f87e0abebdf89b490N.exe

    • Size

      484KB

    • MD5

      276b56bc68499a0f87e0abebdf89b490

    • SHA1

      47bc5156d6123cb1cff4ccd64890544ccb4952a3

    • SHA256

      ed0861e403c3329f3071cf935abaecaaec5aa078a395314b9b52b6da3c6c4e5b

    • SHA512

      710d61b520e40bb9071034da24761779e7ebbeb4c929210b5ff04140c4cdb0be87eb5a0727c0021fcd9b3a1a48ba040c83ec905ab4982d43022e4ca87b0d6742

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwu1b26X1wjhtSizjp:q7Tc2NYHUrAwqzc/

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks