Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    705e40a047aa3c5536cf350b58cc2e61cdac262e997b6b4c6cf64267f1285b22N.exe

  • Size

    454KB

  • Sample

    241226-w6jz9avkhj

  • MD5

    12577743f62fe1dc2e6a08fe92ad2360

  • SHA1

    940ab737ec3cebeec2d59b4f107c89f13ad7c1ea

  • SHA256

    705e40a047aa3c5536cf350b58cc2e61cdac262e997b6b4c6cf64267f1285b22

  • SHA512

    abcd8083032490788d2f23045a558b669fee18c8d231165a1b24db5433656ab86d961fd92f0dc2c6c2a6061193c6deda5f1d349f8edfdc30b8c3298218405e95

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeX:q7Tc2NYHUrAwfMp3CDX

Malware Config

Targets

    • Target

      705e40a047aa3c5536cf350b58cc2e61cdac262e997b6b4c6cf64267f1285b22N.exe

    • Size

      454KB

    • MD5

      12577743f62fe1dc2e6a08fe92ad2360

    • SHA1

      940ab737ec3cebeec2d59b4f107c89f13ad7c1ea

    • SHA256

      705e40a047aa3c5536cf350b58cc2e61cdac262e997b6b4c6cf64267f1285b22

    • SHA512

      abcd8083032490788d2f23045a558b669fee18c8d231165a1b24db5433656ab86d961fd92f0dc2c6c2a6061193c6deda5f1d349f8edfdc30b8c3298218405e95

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeX:q7Tc2NYHUrAwfMp3CDX

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks