General

  • Target

    NEAS.01e493b1fb66d19054beeac5fef1fd60_JC.exe

  • Size

    160KB

  • Sample

    231101-nslypahg28

  • MD5

    01e493b1fb66d19054beeac5fef1fd60

  • SHA1

    83e1a72225e289637030a530444dc7a884629e75

  • SHA256

    256a4f1a9a735df14b5937f86cbe22fcc99e738554936ee87f9b2eac5f5c7c54

  • SHA512

    6e904aaa48f93f3d3ca731fd6bfe75acd856c07485134d7b31a062303928f54813779ad2f59881f78c98d071a04403b760e50da426a89555b6a9bb0c4feb7923

  • SSDEEP

    3072:QhOmTsF93UYfwC6GIout/zqS9oRqJK3SiJ8mqtbfUVKvC9TRDpdLFFENaI5S:Qcm4FmowdHoS/zqPkK3nubP+HF7I5S

Malware Config

Targets

    • Target

      NEAS.01e493b1fb66d19054beeac5fef1fd60_JC.exe

    • Size

      160KB

    • MD5

      01e493b1fb66d19054beeac5fef1fd60

    • SHA1

      83e1a72225e289637030a530444dc7a884629e75

    • SHA256

      256a4f1a9a735df14b5937f86cbe22fcc99e738554936ee87f9b2eac5f5c7c54

    • SHA512

      6e904aaa48f93f3d3ca731fd6bfe75acd856c07485134d7b31a062303928f54813779ad2f59881f78c98d071a04403b760e50da426a89555b6a9bb0c4feb7923

    • SSDEEP

      3072:QhOmTsF93UYfwC6GIout/zqS9oRqJK3SiJ8mqtbfUVKvC9TRDpdLFFENaI5S:Qcm4FmowdHoS/zqPkK3nubP+HF7I5S

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks