Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    8ae177f3bb7dc69e0016152a51d784c60efccd0afdf2f0a50903952c1d15c696N.exe

  • Size

    454KB

  • Sample

    241226-n1z6aavlfx

  • MD5

    2fa21b7cbba39836d175210921f62740

  • SHA1

    ae2df66be3eba49b4391e9a05ad3f7c85efbd2ef

  • SHA256

    8ae177f3bb7dc69e0016152a51d784c60efccd0afdf2f0a50903952c1d15c696

  • SHA512

    eca315e7dd9b7ff65722f16f7d0aa63dc675bbc6cf6f18cae0b01a8ed64b99ea69b652f82ee684cf831ed17523314ddb96da34c247eff0dbd1555507f72c7bb0

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbef:q7Tc2NYHUrAwfMp3CDf

Malware Config

Targets

    • Target

      8ae177f3bb7dc69e0016152a51d784c60efccd0afdf2f0a50903952c1d15c696N.exe

    • Size

      454KB

    • MD5

      2fa21b7cbba39836d175210921f62740

    • SHA1

      ae2df66be3eba49b4391e9a05ad3f7c85efbd2ef

    • SHA256

      8ae177f3bb7dc69e0016152a51d784c60efccd0afdf2f0a50903952c1d15c696

    • SHA512

      eca315e7dd9b7ff65722f16f7d0aa63dc675bbc6cf6f18cae0b01a8ed64b99ea69b652f82ee684cf831ed17523314ddb96da34c247eff0dbd1555507f72c7bb0

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbef:q7Tc2NYHUrAwfMp3CDf

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks