Overview

overview

10

Static

static

7

NEAS.e3372...30.exe

windows7-x64

10

NEAS.e3372...30.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.e33728b4c378a44e579f2d3d64f62d30.exe

  • Size

    371KB

  • Sample

    231021-1fd4jaag4x

  • MD5

    e33728b4c378a44e579f2d3d64f62d30

  • SHA1

    f888c1cca25a7d16eb84d56fd85dd9608a959362

  • SHA256

    3b7e1656cbe472e92d438070b6ae9b174faad6f8107121f73960bff71c8c2c30

  • SHA512

    e9c0c0ed79ca2e0adf35cb23ceca4a8d23d5afbcd87f6eecfe052cf3dc0be9a7d89a00cb2a8b6a050e3b6b9689b7ddfe9d8a0e7d6ff1aee8a917e43714eacef4

  • SSDEEP

    6144:9cm4FmowdHoS4WEkMawdHoSbdwqGw+tw+ttidCyb:/4wFHoS4WEkMTHoSbG++tw+tYYyb

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      NEAS.e33728b4c378a44e579f2d3d64f62d30.exe

    • Size

      371KB

    • MD5

      e33728b4c378a44e579f2d3d64f62d30

    • SHA1

      f888c1cca25a7d16eb84d56fd85dd9608a959362

    • SHA256

      3b7e1656cbe472e92d438070b6ae9b174faad6f8107121f73960bff71c8c2c30

    • SHA512

      e9c0c0ed79ca2e0adf35cb23ceca4a8d23d5afbcd87f6eecfe052cf3dc0be9a7d89a00cb2a8b6a050e3b6b9689b7ddfe9d8a0e7d6ff1aee8a917e43714eacef4

    • SSDEEP

      6144:9cm4FmowdHoS4WEkMawdHoSbdwqGw+tw+ttidCyb:/4wFHoS4WEkMTHoSbG++tw+tYYyb

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks