Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    SecuriteInfo.com.Program.KDU.1.5636.4829.exe

  • Size

    1.0MB

  • Sample

    240928-w7278azfmn

  • MD5

    a683a263949c7443317f3dffacf4cb94

  • SHA1

    dc1a476236ed9454481d0a751540326d28003e2b

  • SHA256

    29773d46780b62c359f71fcacf0dc38a17828b411572f203082a426cffeba0b2

  • SHA512

    cf449cf98f154543c4eadaf46c63ed69daae7353f59b60137be99069788fbbbbd8622ba8d80696e9a3100decfafeeaff1d4fc59921146e1619acc4c3b7701b1d

  • SSDEEP

    24576:i4Zxqy4TVxdlhXZhlKuTTAFt/bqNd3ragFcB3J:imd4Zxdlh/EJH/m3rd+L

Malware Config

Targets

    • Target

      SecuriteInfo.com.Program.KDU.1.5636.4829.exe

    • Size

      1.0MB

    • MD5

      a683a263949c7443317f3dffacf4cb94

    • SHA1

      dc1a476236ed9454481d0a751540326d28003e2b

    • SHA256

      29773d46780b62c359f71fcacf0dc38a17828b411572f203082a426cffeba0b2

    • SHA512

      cf449cf98f154543c4eadaf46c63ed69daae7353f59b60137be99069788fbbbbd8622ba8d80696e9a3100decfafeeaff1d4fc59921146e1619acc4c3b7701b1d

    • SSDEEP

      24576:i4Zxqy4TVxdlhXZhlKuTTAFt/bqNd3ragFcB3J:imd4Zxdlh/EJH/m3rd+L

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

MITRE ATT&CK Enterprise v15

Tasks