Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    6d20f1f8a985af185a9e837bae43c42ba865a1996094a8df6803728e16026fa6N

  • Size

    79KB

  • Sample

    240927-1cmaqs1akm

  • MD5

    f80cfb91ff24007a8869eaeb5a423900

  • SHA1

    0d301c578e0ec5e4dce34d3e3f3b81c0f4cb4dd2

  • SHA256

    6d20f1f8a985af185a9e837bae43c42ba865a1996094a8df6803728e16026fa6

  • SHA512

    b5549713a5e94d5a74034144acff3c214876d5de9276c6ac995e29172a6c19f613651bce60794d3f99715839bf11da139401341bc4ba4a66371037b163f5d63c

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsIpWCz+FR4RzWqC5rINFE4yeF:ymb3NkkiQ3mdBjFIsIpZ+R4RzWqCu4i

Malware Config

Targets

    • Target

      6d20f1f8a985af185a9e837bae43c42ba865a1996094a8df6803728e16026fa6N

    • Size

      79KB

    • MD5

      f80cfb91ff24007a8869eaeb5a423900

    • SHA1

      0d301c578e0ec5e4dce34d3e3f3b81c0f4cb4dd2

    • SHA256

      6d20f1f8a985af185a9e837bae43c42ba865a1996094a8df6803728e16026fa6

    • SHA512

      b5549713a5e94d5a74034144acff3c214876d5de9276c6ac995e29172a6c19f613651bce60794d3f99715839bf11da139401341bc4ba4a66371037b163f5d63c

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsIpWCz+FR4RzWqC5rINFE4yeF:ymb3NkkiQ3mdBjFIsIpZ+R4RzWqCu4i

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks