Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    74844d94aa0f8fc8941ebed5f4fcc5e0N.exe

  • Size

    404KB

  • Sample

    240715-d7x96aygle

  • MD5

    74844d94aa0f8fc8941ebed5f4fcc5e0

  • SHA1

    5ae6013bf6ccbd15a0043c81fd1a564a72b7d5b1

  • SHA256

    6e427cbbeffd5c03c51b00d19c53cd23604edaeaeb384a2db33b56b495835fa0

  • SHA512

    2df58a9a1edb8cb2cbbb469d178d230bf844e915402f267e9f407941d19efd7260d4b22247e369b39d837471cfcdc1ee5000722dd7b724250c7dca0ff7b3f29d

  • SSDEEP

    6144:kcm4FmowdHoSph3Ymu8wdHoSM05d34iWRbzami3x:y4wFHoS3zuxHoSTd34iWRhiB

Malware Config

Targets

    • Target

      74844d94aa0f8fc8941ebed5f4fcc5e0N.exe

    • Size

      404KB

    • MD5

      74844d94aa0f8fc8941ebed5f4fcc5e0

    • SHA1

      5ae6013bf6ccbd15a0043c81fd1a564a72b7d5b1

    • SHA256

      6e427cbbeffd5c03c51b00d19c53cd23604edaeaeb384a2db33b56b495835fa0

    • SHA512

      2df58a9a1edb8cb2cbbb469d178d230bf844e915402f267e9f407941d19efd7260d4b22247e369b39d837471cfcdc1ee5000722dd7b724250c7dca0ff7b3f29d

    • SSDEEP

      6144:kcm4FmowdHoSph3Ymu8wdHoSM05d34iWRbzami3x:y4wFHoS3zuxHoSTd34iWRhiB

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks