General

  • Target

    NEAS.9fea6ec3d434a41e312eba4efa232740.exe

  • Size

    80KB

  • Sample

    231113-g228psba24

  • MD5

    9fea6ec3d434a41e312eba4efa232740

  • SHA1

    41360ae5d2393719e78c38674cc07993e1c53484

  • SHA256

    4466b8453e9c1325a915d0de60f79850630e97ba5ef93ecb0863e1daa488f62e

  • SHA512

    d7e54072aa6d567b202403207490b30aafe3214d25f6e613b695865b8f4e6d0031bdec4ff0cf84379d4cfefee12e581343c4abdea9fc34583589151b76988149

  • SSDEEP

    1536:FvQBeOGtrYS3srx93UBWfwC6Ggnouy87mSSDLum+WV9iOQeWPCyOzxoi0ELGewuV:FhOmTsF93UYfwC6GIout7DSHt+S9Ie51

Malware Config

Targets

    • Target

      NEAS.9fea6ec3d434a41e312eba4efa232740.exe

    • Size

      80KB

    • MD5

      9fea6ec3d434a41e312eba4efa232740

    • SHA1

      41360ae5d2393719e78c38674cc07993e1c53484

    • SHA256

      4466b8453e9c1325a915d0de60f79850630e97ba5ef93ecb0863e1daa488f62e

    • SHA512

      d7e54072aa6d567b202403207490b30aafe3214d25f6e613b695865b8f4e6d0031bdec4ff0cf84379d4cfefee12e581343c4abdea9fc34583589151b76988149

    • SSDEEP

      1536:FvQBeOGtrYS3srx93UBWfwC6Ggnouy87mSSDLum+WV9iOQeWPCyOzxoi0ELGewuV:FhOmTsF93UYfwC6GIout7DSHt+S9Ie51

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks