Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

b0c264e59e...44.exe

windows7-x64

10

b0c264e59e...44.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b0c264e59ec7ef5b9d01b8431fb6b36f1fdd156da0fd613e5814c437773bc144

  • Size

    1.7MB

  • Sample

    240914-rvg93aydkj

  • MD5

    2af63a995177fae320cc58227e6350be

  • SHA1

    41438e5f51d8fd1f40c48dad31c721f3b4bd1b12

  • SHA256

    b0c264e59ec7ef5b9d01b8431fb6b36f1fdd156da0fd613e5814c437773bc144

  • SHA512

    9aa3de8f54224203a8dd740319feed006d05eb18c51ac5b80a9aeafef20131699806f3a1d3307370acc79b194f5a9bdc31dc50ead63a16bd828bb69cb9e4dead

  • SSDEEP

    49152:SFlg29tTVgm/I07S1NaPN5p0sUPYu7Udj:4R8WI07oaXpMAV

Score
10/10
blackmoonbankerdiscoverytrojanupx

Malware Config

Targets

    • Target

      b0c264e59ec7ef5b9d01b8431fb6b36f1fdd156da0fd613e5814c437773bc144

    • Size

      1.7MB

    • MD5

      2af63a995177fae320cc58227e6350be

    • SHA1

      41438e5f51d8fd1f40c48dad31c721f3b4bd1b12

    • SHA256

      b0c264e59ec7ef5b9d01b8431fb6b36f1fdd156da0fd613e5814c437773bc144

    • SHA512

      9aa3de8f54224203a8dd740319feed006d05eb18c51ac5b80a9aeafef20131699806f3a1d3307370acc79b194f5a9bdc31dc50ead63a16bd828bb69cb9e4dead

    • SSDEEP

      49152:SFlg29tTVgm/I07S1NaPN5p0sUPYu7Udj:4R8WI07oaXpMAV

    Score
    10/10
    blackmoonbankerdiscoverytrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Drops startup file

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks