Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

7

503a2012d7...0N.exe

windows7-x64

10

503a2012d7...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    503a2012d743dd9348298cd4a6cc4330N.exe

  • Size

    332KB

  • Sample

    240823-rytr9szdjc

  • MD5

    503a2012d743dd9348298cd4a6cc4330

  • SHA1

    823593367b45c33a899a25926994b017606cea07

  • SHA256

    9dbaacefe3e8e2cbe6407394fbb10bbfb18115776dfc5625ee96adf9a11a4e63

  • SHA512

    14ef643a348ef9b6921e4bcf1c053f4f2b0518a2ec64ac521971f1dce691d83f10a1cc5325f339650d79b3033e577c6d2163cfee729422a3f50060e7c61b923a

  • SSDEEP

    6144:9cm4FmowdHoS4BftapTs8Hoo+6MjTVhRDqzL:/4wFHoS4d0G8HoljTVhRDqzL

Score
10/10
blackmoonbankerdiscoverytrojanupx

Malware Config

Targets

    • Target

      503a2012d743dd9348298cd4a6cc4330N.exe

    • Size

      332KB

    • MD5

      503a2012d743dd9348298cd4a6cc4330

    • SHA1

      823593367b45c33a899a25926994b017606cea07

    • SHA256

      9dbaacefe3e8e2cbe6407394fbb10bbfb18115776dfc5625ee96adf9a11a4e63

    • SHA512

      14ef643a348ef9b6921e4bcf1c053f4f2b0518a2ec64ac521971f1dce691d83f10a1cc5325f339650d79b3033e577c6d2163cfee729422a3f50060e7c61b923a

    • SSDEEP

      6144:9cm4FmowdHoS4BftapTs8Hoo+6MjTVhRDqzL:/4wFHoS4d0G8HoljTVhRDqzL

    Score
    10/10
    blackmoonbankerdiscoverytrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks