Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a98575878cbe576519e2cd8d5776cc90N.exe

  • Size

    213KB

  • Sample

    240823-wq7rda1apk

  • MD5

    a98575878cbe576519e2cd8d5776cc90

  • SHA1

    a83aba869f6b73f09a3a4e40eef299849d015022

  • SHA256

    045d58e7af75b20c84cfa5e804cf8457a7b16118bc1c557d5ae3c664c7e1d5e6

  • SHA512

    a55b65afddf455d8efcdf31b6a9b98c50f7ef00758693bbed4600dfa118e95783c021b28beda8e7d4704e6eba9af89701f5b8ab50f17777d154eb39942eadfd1

  • SSDEEP

    6144:Hcm4FmowdHoSrXZf8l/ubPzYNLPf4t+ltx:V4wFHoSBK/ubLcfXx

Malware Config

Targets

    • Target

      a98575878cbe576519e2cd8d5776cc90N.exe

    • Size

      213KB

    • MD5

      a98575878cbe576519e2cd8d5776cc90

    • SHA1

      a83aba869f6b73f09a3a4e40eef299849d015022

    • SHA256

      045d58e7af75b20c84cfa5e804cf8457a7b16118bc1c557d5ae3c664c7e1d5e6

    • SHA512

      a55b65afddf455d8efcdf31b6a9b98c50f7ef00758693bbed4600dfa118e95783c021b28beda8e7d4704e6eba9af89701f5b8ab50f17777d154eb39942eadfd1

    • SSDEEP

      6144:Hcm4FmowdHoSrXZf8l/ubPzYNLPf4t+ltx:V4wFHoSBK/ubLcfXx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks