Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

1945e69934...86.exe

windows7-x64

10

1945e69934...86.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1945e699342ffe3fa7be7a6af083f4392a62f25148c045e80c805903629f3d86.exe

  • Size

    453KB

  • Sample

    241226-xleepsvmdv

  • MD5

    10f1042cda32e59b525d23ce6bd8f2ce

  • SHA1

    cb673be2ce0ecb760fd27822a90498fc8b31c5e7

  • SHA256

    1945e699342ffe3fa7be7a6af083f4392a62f25148c045e80c805903629f3d86

  • SHA512

    8cc9005e0bd0cf30344930846a8d1f522f123a34f8aa651a987585fc97bc66bd000b24a1a035d924a2de7d2c316971872e204a0bddf2ce83d5d065b748ee56f1

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeM:q7Tc2NYHUrAwfMp3CDM

Score
10/10
blackmoonbankerdiscoverytrojanupx

Malware Config

Targets

    • Target

      1945e699342ffe3fa7be7a6af083f4392a62f25148c045e80c805903629f3d86.exe

    • Size

      453KB

    • MD5

      10f1042cda32e59b525d23ce6bd8f2ce

    • SHA1

      cb673be2ce0ecb760fd27822a90498fc8b31c5e7

    • SHA256

      1945e699342ffe3fa7be7a6af083f4392a62f25148c045e80c805903629f3d86

    • SHA512

      8cc9005e0bd0cf30344930846a8d1f522f123a34f8aa651a987585fc97bc66bd000b24a1a035d924a2de7d2c316971872e204a0bddf2ce83d5d065b748ee56f1

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeM:q7Tc2NYHUrAwfMp3CDM

    Score
    10/10
    blackmoonbankerdiscoverytrojanupx

    • Blackmoon family

      blackmoon

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks