General

  • Target

    NEAS.b30d5649b7340fa04bc28521d3c285e0.exe

  • Size

    476KB

  • Sample

    231103-vfer6sfb7y

  • MD5

    b30d5649b7340fa04bc28521d3c285e0

  • SHA1

    fb63c51c3bc42ad18c0cfdb836fd5b51a453e803

  • SHA256

    eeb8ebcd8f1ee096ea99479553d974970ccf981e732f93cf6719370c6dad7d59

  • SHA512

    8ddac735aa9f6d01a386662aebf8eec07fef64a8a12529c0c434fc809e13b130517b6efc2e80e9078b6fd9e72731dc84de300c2801e7d18678a5af32f5eb49f4

  • SSDEEP

    6144:mcm7ImGddXv/VWrXD486jCpoAhlq1mEjBqLyOSlhNFF2B+:I7TcfNWj168w1VjsyvhNFF2B+

Malware Config

Targets

    • Target

      NEAS.b30d5649b7340fa04bc28521d3c285e0.exe

    • Size

      476KB

    • MD5

      b30d5649b7340fa04bc28521d3c285e0

    • SHA1

      fb63c51c3bc42ad18c0cfdb836fd5b51a453e803

    • SHA256

      eeb8ebcd8f1ee096ea99479553d974970ccf981e732f93cf6719370c6dad7d59

    • SHA512

      8ddac735aa9f6d01a386662aebf8eec07fef64a8a12529c0c434fc809e13b130517b6efc2e80e9078b6fd9e72731dc84de300c2801e7d18678a5af32f5eb49f4

    • SSDEEP

      6144:mcm7ImGddXv/VWrXD486jCpoAhlq1mEjBqLyOSlhNFF2B+:I7TcfNWj168w1VjsyvhNFF2B+

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks