Overview

overview

10

Static

static

7

NEAS.4bd59...JC.exe

windows7-x64

10

NEAS.4bd59...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.4bd59e068636518a212e8b59af527e30_JC.exe

  • Size

    119KB

  • Sample

    231101-qry8qsgh5z

  • MD5

    4bd59e068636518a212e8b59af527e30

  • SHA1

    53af131eabc72665afe14f15e862bfdcb0f5443a

  • SHA256

    16eb736932f6cb45f95151d0dcac492d6906639f151fd76c7bffaa4e6f067ee7

  • SHA512

    507258d72cf15896f163daa226b1680403142613d484d05fb0373bd597f02cee96bcee524578a4a6ebd95630ff1d5f51ca421a38c302c90ed4fd4227f7288e03

  • SSDEEP

    3072:9hOmTsF93UYfwC6GIoutz5yLpcgDE4xTPLE:9cm4FmowdHoSETPg

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      NEAS.4bd59e068636518a212e8b59af527e30_JC.exe

    • Size

      119KB

    • MD5

      4bd59e068636518a212e8b59af527e30

    • SHA1

      53af131eabc72665afe14f15e862bfdcb0f5443a

    • SHA256

      16eb736932f6cb45f95151d0dcac492d6906639f151fd76c7bffaa4e6f067ee7

    • SHA512

      507258d72cf15896f163daa226b1680403142613d484d05fb0373bd597f02cee96bcee524578a4a6ebd95630ff1d5f51ca421a38c302c90ed4fd4227f7288e03

    • SSDEEP

      3072:9hOmTsF93UYfwC6GIoutz5yLpcgDE4xTPLE:9cm4FmowdHoSETPg

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks