Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

ac7ae38323...0N.exe

windows7-x64

10

ac7ae38323...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ac7ae3832310c0ff5c45491ca38510d0N.exe

  • Size

    309KB

  • Sample

    240823-rrlhbasajj

  • MD5

    ac7ae3832310c0ff5c45491ca38510d0

  • SHA1

    2c0e4d51fb03ad5423ec2e858ec001ac4733ee10

  • SHA256

    a668c97e8f3aa090553597fa234d4074eee4094f7597ebe1497ff921ab6fdb61

  • SHA512

    ca844f2f5fa269ea98e0755ddd8e9da6293d95c55d12a106e5507aa8c7d6422adcfd54e5dd4364ecd91b34a9bef009a693735c18123d6e5a175bc70b7c5e3c25

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFo7LAIRUohDLS0k+sLiiBVS0ILlMcGGW7sRCl9eMMV:n3C9BRo/AIuunS3+sOiBVSXxMxTsm9ex

Score
10/10
blackmoonbankerdiscoverytrojanupx

Malware Config

Targets

    • Target

      ac7ae3832310c0ff5c45491ca38510d0N.exe

    • Size

      309KB

    • MD5

      ac7ae3832310c0ff5c45491ca38510d0

    • SHA1

      2c0e4d51fb03ad5423ec2e858ec001ac4733ee10

    • SHA256

      a668c97e8f3aa090553597fa234d4074eee4094f7597ebe1497ff921ab6fdb61

    • SHA512

      ca844f2f5fa269ea98e0755ddd8e9da6293d95c55d12a106e5507aa8c7d6422adcfd54e5dd4364ecd91b34a9bef009a693735c18123d6e5a175bc70b7c5e3c25

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFo7LAIRUohDLS0k+sLiiBVS0ILlMcGGW7sRCl9eMMV:n3C9BRo/AIuunS3+sOiBVSXxMxTsm9ex

    Score
    10/10
    blackmoonbankerdiscoverytrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks