Overview

overview

10

Static

static

7

NEAS.eee8e...60.exe

windows7-x64

10

NEAS.eee8e...60.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.eee8e0b1bddf6c713a78dde0d1112360.exe

  • Size

    54KB

  • Sample

    231028-y3acraec53

  • MD5

    eee8e0b1bddf6c713a78dde0d1112360

  • SHA1

    b5c24ead47e0104ea8c520d44ecc1f82efd6470b

  • SHA256

    c26f63fc7c05ef42d1e33b17356bfa298504ffcca461b6958644e03e84e2d6ee

  • SHA512

    17a1c10de1fabd5e943b1e294c69cbb9ed91808524cf27e1f34a9a743e2dca9c90e39f69b748b911c58fd179787674f8a06d34fecdb035a0f74cba33b8727208

  • SSDEEP

    1536:EvQBeOGtrYS3srx93UBWfwC6Ggnouy8cEDt5KqfjH:EhOmTsF93UYfwC6GIoutcEDjff7

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      NEAS.eee8e0b1bddf6c713a78dde0d1112360.exe

    • Size

      54KB

    • MD5

      eee8e0b1bddf6c713a78dde0d1112360

    • SHA1

      b5c24ead47e0104ea8c520d44ecc1f82efd6470b

    • SHA256

      c26f63fc7c05ef42d1e33b17356bfa298504ffcca461b6958644e03e84e2d6ee

    • SHA512

      17a1c10de1fabd5e943b1e294c69cbb9ed91808524cf27e1f34a9a743e2dca9c90e39f69b748b911c58fd179787674f8a06d34fecdb035a0f74cba33b8727208

    • SSDEEP

      1536:EvQBeOGtrYS3srx93UBWfwC6Ggnouy8cEDt5KqfjH:EhOmTsF93UYfwC6GIoutcEDjff7

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks