Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

7

d3e98a6375...18.exe

windows7-x64

10

d3e98a6375...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d3e98a63755f98df383f5bb10c478dcf_JaffaCakes118

  • Size

    283KB

  • Sample

    240908-j1glqaveln

  • MD5

    d3e98a63755f98df383f5bb10c478dcf

  • SHA1

    9556d68aeebf1e00faf779ecfd263c84a2d3f627

  • SHA256

    a59956298ca83b926be51a6f06ce0653ad25c5d1fbc774f9045241c023957f4f

  • SHA512

    5ef07507bec1f1d5002426e901b1da517f0b9e54018709927b1da1cb2cfb9e7c424fe130afdd732a4d123e0c77aed7ee43c8b20a35387dfcd8f7452cfa8f52cd

  • SSDEEP

    6144:u8lmJK3KPMAFxR2GOcrujXmGuxdw/wIY4RHlA+2fuQkC9boKn:jmJ9z57byjXmGMW/wCFA+22PC9bln

Score
10/10
blackmoonaspackv2bankerdiscoverypersistencetrojan

Malware Config

Targets

    • Target

      d3e98a63755f98df383f5bb10c478dcf_JaffaCakes118

    • Size

      283KB

    • MD5

      d3e98a63755f98df383f5bb10c478dcf

    • SHA1

      9556d68aeebf1e00faf779ecfd263c84a2d3f627

    • SHA256

      a59956298ca83b926be51a6f06ce0653ad25c5d1fbc774f9045241c023957f4f

    • SHA512

      5ef07507bec1f1d5002426e901b1da517f0b9e54018709927b1da1cb2cfb9e7c424fe130afdd732a4d123e0c77aed7ee43c8b20a35387dfcd8f7452cfa8f52cd

    • SSDEEP

      6144:u8lmJK3KPMAFxR2GOcrujXmGuxdw/wIY4RHlA+2fuQkC9boKn:jmJ9z57byjXmGMW/wCFA+22PC9bln

    Score
    10/10
    blackmoonaspackv2bankerdiscoverypersistencetrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks