Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

7f6fb5b7c5...0N.exe

windows7-x64

10

7f6fb5b7c5...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7f6fb5b7c50fa7773545c8c2112189a0N.exe

  • Size

    82KB

  • Sample

    240911-f3ggysvarp

  • MD5

    7f6fb5b7c50fa7773545c8c2112189a0

  • SHA1

    529b3c9ad72c977c5ad64a765c07b3ed64f0e58f

  • SHA256

    a5a1c4fcf2518b4d73d53569fdaa1f36773836081975ab35080769c55461b667

  • SHA512

    0aea601c91b5f4212b6f5e723557f00447c81d7284f828c7068e90e031931b5a08c1face0179fb49205f87cc3e4d8806ffb1df8e22e188df7eef4a37fdf0bacf

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIIpIo60L9QrrA89QFq:ymb3NkkiQ3mdBjFIIp9L9QrrA8T

Score
10/10
blackmoonbankerdiscoverytrojanupx

Malware Config

Targets

    • Target

      7f6fb5b7c50fa7773545c8c2112189a0N.exe

    • Size

      82KB

    • MD5

      7f6fb5b7c50fa7773545c8c2112189a0

    • SHA1

      529b3c9ad72c977c5ad64a765c07b3ed64f0e58f

    • SHA256

      a5a1c4fcf2518b4d73d53569fdaa1f36773836081975ab35080769c55461b667

    • SHA512

      0aea601c91b5f4212b6f5e723557f00447c81d7284f828c7068e90e031931b5a08c1face0179fb49205f87cc3e4d8806ffb1df8e22e188df7eef4a37fdf0bacf

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIIpIo60L9QrrA89QFq:ymb3NkkiQ3mdBjFIIp9L9QrrA8T

    Score
    10/10
    blackmoonbankerdiscoverytrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks