Overview

overview

10

Static

static

3

0486f1a755...18.exe

windows7-x64

10

0486f1a755...18.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0486f1a755983c9016c8a589c7c12286_JaffaCakes118

  • Size

    93KB

  • Sample

    240428-grrdfshg9y

  • MD5

    0486f1a755983c9016c8a589c7c12286

  • SHA1

    451f9d37369d2d6845dc795fe0a6ae5d784b5caf

  • SHA256

    a9994482e4ad4c2563f0f7687b79d3545dcd6f2cd090196b7f773ae56d149db0

  • SHA512

    dd1d187fae2269d7a4f5b6874e441929d0a1bca4c05d4fd306dbbe99aa4de73f120981a1a4bd9d67abb252e1297dc1979bcc9266f9057d4a5ac3f38488631b06

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND+3T4+mzv7oEzNcI2w0V:ymb3NkkiQ3mdBjF+3TYzvTu

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      0486f1a755983c9016c8a589c7c12286_JaffaCakes118

    • Size

      93KB

    • MD5

      0486f1a755983c9016c8a589c7c12286

    • SHA1

      451f9d37369d2d6845dc795fe0a6ae5d784b5caf

    • SHA256

      a9994482e4ad4c2563f0f7687b79d3545dcd6f2cd090196b7f773ae56d149db0

    • SHA512

      dd1d187fae2269d7a4f5b6874e441929d0a1bca4c05d4fd306dbbe99aa4de73f120981a1a4bd9d67abb252e1297dc1979bcc9266f9057d4a5ac3f38488631b06

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND+3T4+mzv7oEzNcI2w0V:ymb3NkkiQ3mdBjF+3TYzvTu

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks