General

  • Target

    NEAS.06e53de40ddd75efaa5adf11a065b0d0.exe

  • Size

    91KB

  • Sample

    231101-q6ahxsbc48

  • MD5

    06e53de40ddd75efaa5adf11a065b0d0

  • SHA1

    f2b6c8e49a4e6a7a0e6203bcbf138a4e652265f2

  • SHA256

    5e7a6ffa49d7da42faf5bdac783d867c1969d464d83ce9ce9b30daaf61fe405a

  • SHA512

    d1352d2bba6ef6c83d13fc3927e07b0dbb6f56ccacada94020aefe6e84f503204e11435218a9195547c04225f0c3f38f8a501015d423c570ea43dec17a18cf91

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDoLuePjDkxbAS4AOXE2V:ymb3NkkiQ3mdBjFoLucjDkx94AOXEC

Malware Config

Targets

    • Target

      NEAS.06e53de40ddd75efaa5adf11a065b0d0.exe

    • Size

      91KB

    • MD5

      06e53de40ddd75efaa5adf11a065b0d0

    • SHA1

      f2b6c8e49a4e6a7a0e6203bcbf138a4e652265f2

    • SHA256

      5e7a6ffa49d7da42faf5bdac783d867c1969d464d83ce9ce9b30daaf61fe405a

    • SHA512

      d1352d2bba6ef6c83d13fc3927e07b0dbb6f56ccacada94020aefe6e84f503204e11435218a9195547c04225f0c3f38f8a501015d423c570ea43dec17a18cf91

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDoLuePjDkxbAS4AOXE2V:ymb3NkkiQ3mdBjFoLucjDkx94AOXEC

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks