Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    87383d76d32c9525455960904873b6d0N.exe

  • Size

    97KB

  • Sample

    240805-nlqnasvdln

  • MD5

    87383d76d32c9525455960904873b6d0

  • SHA1

    ac90a9b30222885ce76fd9b2faa448f2a1a6dec7

  • SHA256

    b0ac6a8cc062e7b0e7fe4bf78e005e2f8b17a003e506a8d9b67b404e63c46d49

  • SHA512

    2285006bd97e6a71fe7e96ebff2c9e7d1a508c44dc3789cf550de0586bb10f3b229a37f2ced3adde9b9caf69819fe29109b7b7c9c06a5bee0ec878f6a2efa3c0

  • SSDEEP

    3072:8hOmTsF93UYfwC6GIout0fmCiiiXA6mzQ:8cm4FmowdHoSgWrXUQ

Malware Config

Targets

    • Target

      87383d76d32c9525455960904873b6d0N.exe

    • Size

      97KB

    • MD5

      87383d76d32c9525455960904873b6d0

    • SHA1

      ac90a9b30222885ce76fd9b2faa448f2a1a6dec7

    • SHA256

      b0ac6a8cc062e7b0e7fe4bf78e005e2f8b17a003e506a8d9b67b404e63c46d49

    • SHA512

      2285006bd97e6a71fe7e96ebff2c9e7d1a508c44dc3789cf550de0586bb10f3b229a37f2ced3adde9b9caf69819fe29109b7b7c9c06a5bee0ec878f6a2efa3c0

    • SSDEEP

      3072:8hOmTsF93UYfwC6GIout0fmCiiiXA6mzQ:8cm4FmowdHoSgWrXUQ

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks