Overview

overview

10

Static

static

7

NEAS.a7ead...JC.exe

windows7-x64

10

NEAS.a7ead...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.a7ead8629d0ae48c233d1ebdeecb1c50_JC.exe

  • Size

    390KB

  • Sample

    231103-r6e9vafc63

  • MD5

    a7ead8629d0ae48c233d1ebdeecb1c50

  • SHA1

    b1c4b9a9274d581fd77d0cd3cd28eccd8b959924

  • SHA256

    9f617e42f2d053c2e04992f478d12a6aed7afc75ce840c491b80c17d5135dfc0

  • SHA512

    1351d5e736405bffc0ea51039397b0a2708e1077cd52fad84f3e2af626f4544bda4180e6e0ed2195c7e3bbfb29fd210347ce040f95e9d428286a04d96cf512d6

  • SSDEEP

    6144:Jcm4FmowdHoSEubDcAkOCOu0EajNVBZr6y2WXxLO1UqWQ:T4wFHoSEubD2PZ

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      NEAS.a7ead8629d0ae48c233d1ebdeecb1c50_JC.exe

    • Size

      390KB

    • MD5

      a7ead8629d0ae48c233d1ebdeecb1c50

    • SHA1

      b1c4b9a9274d581fd77d0cd3cd28eccd8b959924

    • SHA256

      9f617e42f2d053c2e04992f478d12a6aed7afc75ce840c491b80c17d5135dfc0

    • SHA512

      1351d5e736405bffc0ea51039397b0a2708e1077cd52fad84f3e2af626f4544bda4180e6e0ed2195c7e3bbfb29fd210347ce040f95e9d428286a04d96cf512d6

    • SSDEEP

      6144:Jcm4FmowdHoSEubDcAkOCOu0EajNVBZr6y2WXxLO1UqWQ:T4wFHoSEubD2PZ

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks