Overview

overview

10

Static

static

3

NEAS.aa86b...90.exe

windows7-x64

10

NEAS.aa86b...90.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.aa86bee809db5d73ab4fb1342dfef890.exe

  • Size

    403KB

  • Sample

    231013-zcrd1sfg29

  • MD5

    aa86bee809db5d73ab4fb1342dfef890

  • SHA1

    cc36666dde0e2c045917dab39e4614656cff86e7

  • SHA256

    fce54b92ad241da823e76eb62d6d110054ec9e15fcef9c22a0889577fa8f46e6

  • SHA512

    ec27ddf63faf05529f5aa656f07b275a01623e6d34d7a439a60dc7514b8e3c1cad8e4b2bdbe0d7df2c5df1a09b717109d87060611c428b118ec6f1b1a29fc34b

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFIi/0RU6QeYQsm71vPmPzTkV2wcTl+JBy+3yoRaYZkYh9GVQcA:n3C9BRIG0asYFm71mPfkk+JBy+iJBe

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      NEAS.aa86bee809db5d73ab4fb1342dfef890.exe

    • Size

      403KB

    • MD5

      aa86bee809db5d73ab4fb1342dfef890

    • SHA1

      cc36666dde0e2c045917dab39e4614656cff86e7

    • SHA256

      fce54b92ad241da823e76eb62d6d110054ec9e15fcef9c22a0889577fa8f46e6

    • SHA512

      ec27ddf63faf05529f5aa656f07b275a01623e6d34d7a439a60dc7514b8e3c1cad8e4b2bdbe0d7df2c5df1a09b717109d87060611c428b118ec6f1b1a29fc34b

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFIi/0RU6QeYQsm71vPmPzTkV2wcTl+JBy+3yoRaYZkYh9GVQcA:n3C9BRIG0asYFm71mPfkk+JBy+iJBe

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks