Overview

overview

10

Static

static

3

NEAS.075ea...20.exe

windows7-x64

10

NEAS.075ea...20.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.075eaef9554b973e915d6df0ea938a20.exe

  • Size

    470KB

  • Sample

    231031-krss3aag9v

  • MD5

    075eaef9554b973e915d6df0ea938a20

  • SHA1

    1f73385ae2cfd606e248a324db0020e8197e46e1

  • SHA256

    c770e7ab6aa0d80143647be6253b70e9d7bd13b49c374476dabd3d935813a8b4

  • SHA512

    e893eee92afd393bdea01e7fad539677cac8533f0101cefb272dd30d99177fa14991d0d80b6407594cc0bc115ca76763d325438fd23e729d559b1a9b444a184f

  • SSDEEP

    12288:n3C9uDVw6326pKZ9asZqoZHz+evcn0Meh2FCw:Su326p0aroZt0qw

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      NEAS.075eaef9554b973e915d6df0ea938a20.exe

    • Size

      470KB

    • MD5

      075eaef9554b973e915d6df0ea938a20

    • SHA1

      1f73385ae2cfd606e248a324db0020e8197e46e1

    • SHA256

      c770e7ab6aa0d80143647be6253b70e9d7bd13b49c374476dabd3d935813a8b4

    • SHA512

      e893eee92afd393bdea01e7fad539677cac8533f0101cefb272dd30d99177fa14991d0d80b6407594cc0bc115ca76763d325438fd23e729d559b1a9b444a184f

    • SSDEEP

      12288:n3C9uDVw6326pKZ9asZqoZHz+evcn0Meh2FCw:Su326p0aroZt0qw

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks