Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2705f4e72962f07c9c4e02bbb284d1e3dab3f098ea789e700afa9612dcf8437dN

  • Size

    82KB

  • Sample

    240927-w2qbgatejj

  • MD5

    54da9beff2981097b3531290564ce3d0

  • SHA1

    a7e99b4c8d0317d43f822b98b27b5ea5d348ebdc

  • SHA256

    2705f4e72962f07c9c4e02bbb284d1e3dab3f098ea789e700afa9612dcf8437d

  • SHA512

    e7bbfc6ad03f6eb409286dfc4228c0267f3e0f59449f798e2c8e61554660fde88774e0bee70532bc33d76e371d1bfb3a52ab0983d33a6285d8987a12f4b9965e

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIIpIo60L9QrrA89Q1C:ymb3NkkiQ3mdBjFIIp9L9QrrA82C

Malware Config

Targets

    • Target

      2705f4e72962f07c9c4e02bbb284d1e3dab3f098ea789e700afa9612dcf8437dN

    • Size

      82KB

    • MD5

      54da9beff2981097b3531290564ce3d0

    • SHA1

      a7e99b4c8d0317d43f822b98b27b5ea5d348ebdc

    • SHA256

      2705f4e72962f07c9c4e02bbb284d1e3dab3f098ea789e700afa9612dcf8437d

    • SHA512

      e7bbfc6ad03f6eb409286dfc4228c0267f3e0f59449f798e2c8e61554660fde88774e0bee70532bc33d76e371d1bfb3a52ab0983d33a6285d8987a12f4b9965e

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIIpIo60L9QrrA89Q1C:ymb3NkkiQ3mdBjFIIp9L9QrrA82C

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks