Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a031bda797585007dca504eb84a7ebb1584c3feab508e2738a38a6ca101de08aN

  • Size

    452KB

  • Sample

    241005-j99zmavflj

  • MD5

    895f492a7be5d60b7fa587754c729230

  • SHA1

    b952b9ad67b6f9cf78d7337d5b7c536a1489c2d2

  • SHA256

    a031bda797585007dca504eb84a7ebb1584c3feab508e2738a38a6ca101de08a

  • SHA512

    8f61473e083d1f206c71e85eb87ed962be0458de73acfd637a5e8108c280d132daf8b71fd22da59443c16b10c16c20ec14f88d97c4970edef0f61d696338526c

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeA:q7Tc2NYHUrAwfMp3CDA

Malware Config

Targets

    • Target

      a031bda797585007dca504eb84a7ebb1584c3feab508e2738a38a6ca101de08aN

    • Size

      452KB

    • MD5

      895f492a7be5d60b7fa587754c729230

    • SHA1

      b952b9ad67b6f9cf78d7337d5b7c536a1489c2d2

    • SHA256

      a031bda797585007dca504eb84a7ebb1584c3feab508e2738a38a6ca101de08a

    • SHA512

      8f61473e083d1f206c71e85eb87ed962be0458de73acfd637a5e8108c280d132daf8b71fd22da59443c16b10c16c20ec14f88d97c4970edef0f61d696338526c

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeA:q7Tc2NYHUrAwfMp3CDA

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks