Overview

overview

10

Static

static

10

NEAS.68158...JC.exe

windows7-x64

10

NEAS.68158...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.681580e75bb288de543753bd956591b0_JC.exe

  • Size

    172KB

  • Sample

    231101-kymkmagb96

  • MD5

    681580e75bb288de543753bd956591b0

  • SHA1

    15f8b51988035423de5b137de224a56e791c94f4

  • SHA256

    ab3970c701825c36b2945ceea052ce5a2ca6a54c28f231356fcef2ab9dcd2dd9

  • SHA512

    8cbdf49ac25b7f7111c63375eef25d76482965347a73f9777e6005dd07b2ec73cf011bfbde11781ecf4f5d4043cfb84a6e7ff9dbf2146dcf8c2749486117197f

  • SSDEEP

    3072:AhOmTsF93UYfwC6GIoutQ6M/Fpi8rY9AABa1YRMxgRP5Z3:Acm4FmowdHoSCddWhR/Z3

Score
10/10
berbewblackmoonbankerdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.681580e75bb288de543753bd956591b0_JC.exe

    • Size

      172KB

    • MD5

      681580e75bb288de543753bd956591b0

    • SHA1

      15f8b51988035423de5b137de224a56e791c94f4

    • SHA256

      ab3970c701825c36b2945ceea052ce5a2ca6a54c28f231356fcef2ab9dcd2dd9

    • SHA512

      8cbdf49ac25b7f7111c63375eef25d76482965347a73f9777e6005dd07b2ec73cf011bfbde11781ecf4f5d4043cfb84a6e7ff9dbf2146dcf8c2749486117197f

    • SSDEEP

      3072:AhOmTsF93UYfwC6GIoutQ6M/Fpi8rY9AABa1YRMxgRP5Z3:Acm4FmowdHoSCddWhR/Z3

    Score
    10/10
    blackmoonbankerdropperpersistencetrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks