Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    b8d32d58c62504ec10559113f782eb50N.exe

  • Size

    523KB

  • Sample

    240723-pzg4razgnm

  • MD5

    b8d32d58c62504ec10559113f782eb50

  • SHA1

    9134085e8e84199b23aad8189dbf6d125143172b

  • SHA256

    bfeeee3d2737f117e68db46600b416614c6217759c6bb383fcafbfc6fecab355

  • SHA512

    94dff61181a2c84dd9ceb6f99b24c9c1d8a8c09b11b222f41dfcfd53746ded28ffc856817d80ca288457f3f9a5779d98d0fd3ab9e33e831b14f9536bd6cd0269

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2CfNnkymTwaJ3o89H3x+v:q7Tc2NYHUrAwfMHNnpls4894v

Malware Config

Targets

    • Target

      b8d32d58c62504ec10559113f782eb50N.exe

    • Size

      523KB

    • MD5

      b8d32d58c62504ec10559113f782eb50

    • SHA1

      9134085e8e84199b23aad8189dbf6d125143172b

    • SHA256

      bfeeee3d2737f117e68db46600b416614c6217759c6bb383fcafbfc6fecab355

    • SHA512

      94dff61181a2c84dd9ceb6f99b24c9c1d8a8c09b11b222f41dfcfd53746ded28ffc856817d80ca288457f3f9a5779d98d0fd3ab9e33e831b14f9536bd6cd0269

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2CfNnkymTwaJ3o89H3x+v:q7Tc2NYHUrAwfMHNnpls4894v

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks