Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

8b7bafccbe...7N.exe

windows7-x64

10

8b7bafccbe...7N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8b7bafccbe2843d2808c1dbc99c059fb12db5fe650b4901cc80dec521a57c5c7N.exe

  • Size

    82KB

  • Sample

    240925-f1qb3sxcpk

  • MD5

    646462650ef09a5934afdd3a59580db0

  • SHA1

    101cb20d74cf74724941662c0ca64863a14b4ad1

  • SHA256

    8b7bafccbe2843d2808c1dbc99c059fb12db5fe650b4901cc80dec521a57c5c7

  • SHA512

    3853f23078ec8a600e2d42ddd5eb652e20feaa58319974ad013174b9f3ab677117a04b6833074e27e9ab0fdbe6d6690cc853f017292e91af97e56a01fc738055

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIIpIo60L9QrrA89L:ymb3NkkiQ3mdBjFIIp9L9QrrA8l

Score
10/10
blackmoonbankerdiscoverytrojanupx

Malware Config

Targets

    • Target

      8b7bafccbe2843d2808c1dbc99c059fb12db5fe650b4901cc80dec521a57c5c7N.exe

    • Size

      82KB

    • MD5

      646462650ef09a5934afdd3a59580db0

    • SHA1

      101cb20d74cf74724941662c0ca64863a14b4ad1

    • SHA256

      8b7bafccbe2843d2808c1dbc99c059fb12db5fe650b4901cc80dec521a57c5c7

    • SHA512

      3853f23078ec8a600e2d42ddd5eb652e20feaa58319974ad013174b9f3ab677117a04b6833074e27e9ab0fdbe6d6690cc853f017292e91af97e56a01fc738055

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIIpIo60L9QrrA89L:ymb3NkkiQ3mdBjFIIp9L9QrrA8l

    Score
    10/10
    blackmoonbankerdiscoverytrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks