Overview

overview

10

Static

static

3

NEAS.21462...JC.exe

windows7-x64

10

NEAS.21462...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.214626f791c1504f36d22f714349fed0_JC.exe

  • Size

    134KB

  • Sample

    231011-wrbqbsfd82

  • MD5

    214626f791c1504f36d22f714349fed0

  • SHA1

    a9c97bc90b2ef85ebadf8a4febf3fcf5190395fa

  • SHA256

    4b3cc10722d678b39929c1fd9934f7a740b4d3b8ee88880c45070b882eda532d

  • SHA512

    2fdb951f4cd6674f5931b3f9620ea1a05d4e26dad69854059f0ec87b5d3a6b33c161458ef55906656d5cde12f318a6f40a1173af84cffb1c9bfc62b5093f437f

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFIi/0RU6QeYQsm71vPmm8mzuFli55p1wQM:n3C9BRIG0asYFm71mm8fliAH

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      NEAS.214626f791c1504f36d22f714349fed0_JC.exe

    • Size

      134KB

    • MD5

      214626f791c1504f36d22f714349fed0

    • SHA1

      a9c97bc90b2ef85ebadf8a4febf3fcf5190395fa

    • SHA256

      4b3cc10722d678b39929c1fd9934f7a740b4d3b8ee88880c45070b882eda532d

    • SHA512

      2fdb951f4cd6674f5931b3f9620ea1a05d4e26dad69854059f0ec87b5d3a6b33c161458ef55906656d5cde12f318a6f40a1173af84cffb1c9bfc62b5093f437f

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFIi/0RU6QeYQsm71vPmm8mzuFli55p1wQM:n3C9BRIG0asYFm71mm8fliAH

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks