Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0472547823c9419605a1514cf582e323_JaffaCakes118

  • Size

    452KB

  • Sample

    240728-bgvegascka

  • MD5

    0472547823c9419605a1514cf582e323

  • SHA1

    2518af8bf595b294d7bd821f9a722a3b70aa5afc

  • SHA256

    b2d94bee233c9e0c887b9d64fdab5200436a50e1399166480af56d78326cb7fc

  • SHA512

    5c04c0093f8c3c268341ec988cabf31b05cbbe1bec84ee83833fa6e8d0f56a0eb352213db81a779594bd873cef8f4ff39f1342a47d48e1631c41e58cdb2e3cd7

  • SSDEEP

    6144:Pcm7ImGddXtWrXD486jJq1BStv4Ib1H6I+N:d7Tc9Wj16A3Stvx6I+N

Malware Config

Targets

    • Target

      0472547823c9419605a1514cf582e323_JaffaCakes118

    • Size

      452KB

    • MD5

      0472547823c9419605a1514cf582e323

    • SHA1

      2518af8bf595b294d7bd821f9a722a3b70aa5afc

    • SHA256

      b2d94bee233c9e0c887b9d64fdab5200436a50e1399166480af56d78326cb7fc

    • SHA512

      5c04c0093f8c3c268341ec988cabf31b05cbbe1bec84ee83833fa6e8d0f56a0eb352213db81a779594bd873cef8f4ff39f1342a47d48e1631c41e58cdb2e3cd7

    • SSDEEP

      6144:Pcm7ImGddXtWrXD486jJq1BStv4Ib1H6I+N:d7Tc9Wj16A3Stvx6I+N

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks