Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    b84eb741b8fcfcd892fca53f4af597c0N.exe

  • Size

    443KB

  • Sample

    240905-2k9xfasgqd

  • MD5

    b84eb741b8fcfcd892fca53f4af597c0

  • SHA1

    91a34dd6391af8708482cb6e513a451ca8636712

  • SHA256

    8ff61e464a1c49c1bd6a1e43f7d6c439dc264df0166c146badfc39d9cfa5b730

  • SHA512

    dbf32daff0261ce4de465d2d16e2b25597b6fe89135e265bda4ca1a3891756c1b704386de48e7ac9f3e8a27a07e8b473cae0fc1bd4e7214462fe7601b1411b44

  • SSDEEP

    12288:M4wFHoSpg4wFHonR/nPF2LnFL4wF04wFK4wFK4wluAQ:UrR/nPRQ

Malware Config

Targets

    • Target

      b84eb741b8fcfcd892fca53f4af597c0N.exe

    • Size

      443KB

    • MD5

      b84eb741b8fcfcd892fca53f4af597c0

    • SHA1

      91a34dd6391af8708482cb6e513a451ca8636712

    • SHA256

      8ff61e464a1c49c1bd6a1e43f7d6c439dc264df0166c146badfc39d9cfa5b730

    • SHA512

      dbf32daff0261ce4de465d2d16e2b25597b6fe89135e265bda4ca1a3891756c1b704386de48e7ac9f3e8a27a07e8b473cae0fc1bd4e7214462fe7601b1411b44

    • SSDEEP

      12288:M4wFHoSpg4wFHonR/nPF2LnFL4wF04wFK4wFK4wluAQ:UrR/nPRQ

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks