General

  • Target

    NEAS.51ef731d24a08414ef5dacb4c15fb5c0.exe

  • Size

    69KB

  • Sample

    231111-wjtaeaae4w

  • MD5

    51ef731d24a08414ef5dacb4c15fb5c0

  • SHA1

    736cb3dc9aca9a03e76a2f5a570cc76f54a42d17

  • SHA256

    7c18e02a2a7c43d850d93fc00e317d9ef48ae71512e50f62b4a31ee46110ab25

  • SHA512

    0a90b2f3ba38411cc14c07130d4bd77b1f7883b63e0282e467bc6beca5fc50a2405fba86e540244f68a5256be386b5dd6893466ee8f2b868cf039d2e2220ce07

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIvuzkm07MW5E:ymb3NkkiQ3mdBjFIvlyME

Malware Config

Targets

    • Target

      NEAS.51ef731d24a08414ef5dacb4c15fb5c0.exe

    • Size

      69KB

    • MD5

      51ef731d24a08414ef5dacb4c15fb5c0

    • SHA1

      736cb3dc9aca9a03e76a2f5a570cc76f54a42d17

    • SHA256

      7c18e02a2a7c43d850d93fc00e317d9ef48ae71512e50f62b4a31ee46110ab25

    • SHA512

      0a90b2f3ba38411cc14c07130d4bd77b1f7883b63e0282e467bc6beca5fc50a2405fba86e540244f68a5256be386b5dd6893466ee8f2b868cf039d2e2220ce07

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIvuzkm07MW5E:ymb3NkkiQ3mdBjFIvlyME

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks