Overview

overview

10

Static

static

7

NEAS.9ee00...90.exe

windows7-x64

10

NEAS.9ee00...90.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.9ee00ff232f1bc4f2a1a8fa38c8cc990.exe

  • Size

    371KB

  • Sample

    231016-w532qsgh4t

  • MD5

    9ee00ff232f1bc4f2a1a8fa38c8cc990

  • SHA1

    115f165b52c16f992f853845aacc1c7893f1c1ef

  • SHA256

    bbd39bc2ab889e71f67c527fd872cba70d5bd7eb59ba1799bec93efe0a791833

  • SHA512

    4d7889b2cfbaa91236ef9f2d9a4f7fee85391c14fc1669da7d2e79a864e91b7bb5f0bccef8f137b46b9336a82040416165af0d857d3b0a13d6940e836ad3338a

  • SSDEEP

    6144:kcm4FmowdHoSphraHcpOaKHpSwp9OD0IbsaA:y4wFHoS3eFaKHpNKbbsT

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      NEAS.9ee00ff232f1bc4f2a1a8fa38c8cc990.exe

    • Size

      371KB

    • MD5

      9ee00ff232f1bc4f2a1a8fa38c8cc990

    • SHA1

      115f165b52c16f992f853845aacc1c7893f1c1ef

    • SHA256

      bbd39bc2ab889e71f67c527fd872cba70d5bd7eb59ba1799bec93efe0a791833

    • SHA512

      4d7889b2cfbaa91236ef9f2d9a4f7fee85391c14fc1669da7d2e79a864e91b7bb5f0bccef8f137b46b9336a82040416165af0d857d3b0a13d6940e836ad3338a

    • SSDEEP

      6144:kcm4FmowdHoSphraHcpOaKHpSwp9OD0IbsaA:y4wFHoS3eFaKHpNKbbsT

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks