Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    bfaba925143fe5b888b4fcccbe66a800N

  • Size

    68KB

  • Sample

    240911-1nwnjsvera

  • MD5

    bfaba925143fe5b888b4fcccbe66a800

  • SHA1

    05f82d1d603cf7adaabd62e7c5f8e39c0c42679e

  • SHA256

    5dc23cf3f9e28d6923d50d11bb0dacb191a24d240a1a36a28781ca145b1ef958

  • SHA512

    6955e220af497b33e7cbb3911ff2008871f8ac3f8874c4fd3ec28db70ef3506a6d92fd6b342ddf9030e097da432df9b015673805921913a59700d19c8d0c5b1c

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsIoAcb:ymb3NkkiQ3mdBjFIsIVcb

Malware Config

Targets

    • Target

      bfaba925143fe5b888b4fcccbe66a800N

    • Size

      68KB

    • MD5

      bfaba925143fe5b888b4fcccbe66a800

    • SHA1

      05f82d1d603cf7adaabd62e7c5f8e39c0c42679e

    • SHA256

      5dc23cf3f9e28d6923d50d11bb0dacb191a24d240a1a36a28781ca145b1ef958

    • SHA512

      6955e220af497b33e7cbb3911ff2008871f8ac3f8874c4fd3ec28db70ef3506a6d92fd6b342ddf9030e097da432df9b015673805921913a59700d19c8d0c5b1c

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsIoAcb:ymb3NkkiQ3mdBjFIsIVcb

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks