Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    bf41aac8d8c37ff65eb2167bca3491545c4c7291504789c17fd209c726cb07c1N.exe

  • Size

    456KB

  • Sample

    241226-jjgv6aznaz

  • MD5

    d66914a5f3b2ec342f3430dee2122f20

  • SHA1

    f4adac19822a9305fe0093fbc3de5d315d0e07ab

  • SHA256

    bf41aac8d8c37ff65eb2167bca3491545c4c7291504789c17fd209c726cb07c1

  • SHA512

    4dbb190cb7563a617e326a06d2ab61c4e4eecfafa9fa25f4aeb7b500899f205d66c3fc55fba046682203d0b7725b6aae0054c19b6e273f4e72b763b8517201ee

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeRw:q7Tc2NYHUrAwfMp3CDRw

Malware Config

Targets

    • Target

      bf41aac8d8c37ff65eb2167bca3491545c4c7291504789c17fd209c726cb07c1N.exe

    • Size

      456KB

    • MD5

      d66914a5f3b2ec342f3430dee2122f20

    • SHA1

      f4adac19822a9305fe0093fbc3de5d315d0e07ab

    • SHA256

      bf41aac8d8c37ff65eb2167bca3491545c4c7291504789c17fd209c726cb07c1

    • SHA512

      4dbb190cb7563a617e326a06d2ab61c4e4eecfafa9fa25f4aeb7b500899f205d66c3fc55fba046682203d0b7725b6aae0054c19b6e273f4e72b763b8517201ee

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeRw:q7Tc2NYHUrAwfMp3CDRw

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks