Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    150d68770dd1daebd5489d5d068590640d2fd495898a863836e69db5a8378e54

  • Size

    383KB

  • Sample

    240908-xr5tvatfjh

  • MD5

    e10912ffc2ce6d07940672e9f6dee201

  • SHA1

    bd4aa760ce86808e11cbc8efc976640f9e2d5c8c

  • SHA256

    150d68770dd1daebd5489d5d068590640d2fd495898a863836e69db5a8378e54

  • SHA512

    0e6d55450664835cacafb40c662a94afb3dccacfb8f6799b5d0e54c5ac160fe4bff5282b630cebeed2ee3249bed909a2c39530787b9740be606f8b4826ac096a

  • SSDEEP

    6144:n3C9BRIG0asYFm71mPfkVB8dKwaO5CVwv:n3C9uYA7okVqdKwaO5CVS

Malware Config

Targets

    • Target

      150d68770dd1daebd5489d5d068590640d2fd495898a863836e69db5a8378e54

    • Size

      383KB

    • MD5

      e10912ffc2ce6d07940672e9f6dee201

    • SHA1

      bd4aa760ce86808e11cbc8efc976640f9e2d5c8c

    • SHA256

      150d68770dd1daebd5489d5d068590640d2fd495898a863836e69db5a8378e54

    • SHA512

      0e6d55450664835cacafb40c662a94afb3dccacfb8f6799b5d0e54c5ac160fe4bff5282b630cebeed2ee3249bed909a2c39530787b9740be606f8b4826ac096a

    • SSDEEP

      6144:n3C9BRIG0asYFm71mPfkVB8dKwaO5CVwv:n3C9uYA7okVqdKwaO5CVS

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks