Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    936906fa2a8175ef38863c74f9adc340N.exe

  • Size

    75KB

  • Sample

    240802-mypq4avhkq

  • MD5

    936906fa2a8175ef38863c74f9adc340

  • SHA1

    d4be1951014fc9889a424732c0ce02e2860ced20

  • SHA256

    223760ba2802f9e5d4cff76fb5663492b0b7a2444883de6b20ff88f9b39bfe15

  • SHA512

    6ffe3ca13ac44dd4ff6f9bb7159938a406eb2de58c77cc20eaa7063af8ee900f279310c4b2599ae122f3babe3c14aacd9b6e5c75dda94b36220788f13393cb0a

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIfv7+afCD+QsQbKQPESBV:ymb3NkkiQ3mdBjFIfvTfCD+HlQcY

Malware Config

Targets

    • Target

      936906fa2a8175ef38863c74f9adc340N.exe

    • Size

      75KB

    • MD5

      936906fa2a8175ef38863c74f9adc340

    • SHA1

      d4be1951014fc9889a424732c0ce02e2860ced20

    • SHA256

      223760ba2802f9e5d4cff76fb5663492b0b7a2444883de6b20ff88f9b39bfe15

    • SHA512

      6ffe3ca13ac44dd4ff6f9bb7159938a406eb2de58c77cc20eaa7063af8ee900f279310c4b2599ae122f3babe3c14aacd9b6e5c75dda94b36220788f13393cb0a

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIfv7+afCD+QsQbKQPESBV:ymb3NkkiQ3mdBjFIfvTfCD+HlQcY

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks