Overview

overview

10

Static

static

3

0474c86f14...18.exe

windows7-x64

10

0474c86f14...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0474c86f142a45eefedda54e8a164168_JaffaCakes118

  • Size

    357KB

  • Sample

    240428-f1n41sgh66

  • MD5

    0474c86f142a45eefedda54e8a164168

  • SHA1

    0d49c1e4c4352f6e3b3f089612f23e4adedcd46f

  • SHA256

    45f84300e3ff955259341cf062d65fb18772cfd31c3406d9deabdc5221b7ece6

  • SHA512

    2c4c67ba3c41b9b3ee4502bc8f0cf6d955390a9e5964278e0b576f5323205412318f4bf6a0e8b6e1a65be56448eb4c8fb0d78bc9a65a436d9b44ed521b0e2d60

  • SSDEEP

    3072:PhOm2sI93UufdC67cihfmCiiiXAsACF486jFX8fkYtB6J6eUTV4aTHDaLq:Pcm7ImGddXtWrXD486jFX88Y/eUBnV

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      0474c86f142a45eefedda54e8a164168_JaffaCakes118

    • Size

      357KB

    • MD5

      0474c86f142a45eefedda54e8a164168

    • SHA1

      0d49c1e4c4352f6e3b3f089612f23e4adedcd46f

    • SHA256

      45f84300e3ff955259341cf062d65fb18772cfd31c3406d9deabdc5221b7ece6

    • SHA512

      2c4c67ba3c41b9b3ee4502bc8f0cf6d955390a9e5964278e0b576f5323205412318f4bf6a0e8b6e1a65be56448eb4c8fb0d78bc9a65a436d9b44ed521b0e2d60

    • SSDEEP

      3072:PhOm2sI93UufdC67cihfmCiiiXAsACF486jFX8fkYtB6J6eUTV4aTHDaLq:Pcm7ImGddXtWrXD486jFX88Y/eUBnV

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks