Overview

overview

10

Static

static

10

NEAS.25281...60.exe

windows7-x64

10

NEAS.25281...60.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.252812a584840421c504c6b70d224460.exe

  • Size

    225KB

  • Sample

    231103-s9mc1aea4y

  • MD5

    252812a584840421c504c6b70d224460

  • SHA1

    1f6439095e4b7a354993ffb9cc9a592aa8d80c2e

  • SHA256

    c7541559d0094babdd6a8908a2879e0a6d0e291e671aaced913597d027521e8d

  • SHA512

    21f4d19aa002df6f737fcc2d7113ae74c79cd8696c06f28e697ea5b5c8589572bff40a1975ff3b8e994d269163b688597f1024036c99c635d17d0b4a757cd1e9

  • SSDEEP

    6144:jcm4FmowdHoSbuCHfYWNhraHcpOaKHpOCt:J4wFHoSbxYSeFaKHpOCt

Score
10/10
berbewblackmoonbankerdropperpersistencetrojanupx

Malware Config

Targets

    • Target

      NEAS.252812a584840421c504c6b70d224460.exe

    • Size

      225KB

    • MD5

      252812a584840421c504c6b70d224460

    • SHA1

      1f6439095e4b7a354993ffb9cc9a592aa8d80c2e

    • SHA256

      c7541559d0094babdd6a8908a2879e0a6d0e291e671aaced913597d027521e8d

    • SHA512

      21f4d19aa002df6f737fcc2d7113ae74c79cd8696c06f28e697ea5b5c8589572bff40a1975ff3b8e994d269163b688597f1024036c99c635d17d0b4a757cd1e9

    • SSDEEP

      6144:jcm4FmowdHoSbuCHfYWNhraHcpOaKHpOCt:J4wFHoSbxYSeFaKHpOCt

    Score
    10/10
    blackmoonbankerdropperpersistencetrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks