General

  • Target

    NEAS.0d0b6ccc737fa0ed0aff91941b55db80.exe

  • Size

    196KB

  • Sample

    231118-b36dvsgg22

  • MD5

    0d0b6ccc737fa0ed0aff91941b55db80

  • SHA1

    aadf848f0c7a506b4011556da3c0746e31c14681

  • SHA256

    6ba87496a0f5b8d23f18d937e16fecb3097b38a9716d51b17c2ba97a96b29b60

  • SHA512

    ed00c44a7acb17a037212e30acd8b17ed81bc6270b970fec6f263a80bc61bae2bf07d94b416c7e63deb075034a8060bb704233382eb93c3355fb88d806b169c2

  • SSDEEP

    3072:xhOmTsF93UYfwC6GIout3WVi/8HCpi8rY9AABa1YRMxl1522cJ1b:xcm4FmowdHoS3WV28HCddWhRO1LcD

Malware Config

Targets

    • Target

      NEAS.0d0b6ccc737fa0ed0aff91941b55db80.exe

    • Size

      196KB

    • MD5

      0d0b6ccc737fa0ed0aff91941b55db80

    • SHA1

      aadf848f0c7a506b4011556da3c0746e31c14681

    • SHA256

      6ba87496a0f5b8d23f18d937e16fecb3097b38a9716d51b17c2ba97a96b29b60

    • SHA512

      ed00c44a7acb17a037212e30acd8b17ed81bc6270b970fec6f263a80bc61bae2bf07d94b416c7e63deb075034a8060bb704233382eb93c3355fb88d806b169c2

    • SSDEEP

      3072:xhOmTsF93UYfwC6GIout3WVi/8HCpi8rY9AABa1YRMxl1522cJ1b:xcm4FmowdHoS3WV28HCddWhRO1LcD

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks