Overview

overview

10

Static

static

7

e81d63337b...18.exe

windows7-x64

10

e81d63337b...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e81d63337bef6ebe2ec64854e618d91d_JaffaCakes118

  • Size

    76KB

  • Sample

    240408-wzt7msfh85

  • MD5

    e81d63337bef6ebe2ec64854e618d91d

  • SHA1

    e80fdee490584e95eb287814c1ba4e4b002dae37

  • SHA256

    0fa708afb950135235414a19701664fa98611da87fc53503077566cabb432e47

  • SHA512

    36445a6144820606d7a43d736a2d5d32838d18a78eac7d35da6e9abdc2e71ff68756535e8b6a44f97472a0e06f828fe98f095b8749450de2d7979ab7eab3053a

  • SSDEEP

    1536:kvQBeOGtrYS3srx93UBWfwC6Ggnouy8p5yAXNYl7tSS52nIsrtuXmHzl3n:khOmTsF93UYfwC6GIoutpYB7tSS5Ctug

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      e81d63337bef6ebe2ec64854e618d91d_JaffaCakes118

    • Size

      76KB

    • MD5

      e81d63337bef6ebe2ec64854e618d91d

    • SHA1

      e80fdee490584e95eb287814c1ba4e4b002dae37

    • SHA256

      0fa708afb950135235414a19701664fa98611da87fc53503077566cabb432e47

    • SHA512

      36445a6144820606d7a43d736a2d5d32838d18a78eac7d35da6e9abdc2e71ff68756535e8b6a44f97472a0e06f828fe98f095b8749450de2d7979ab7eab3053a

    • SSDEEP

      1536:kvQBeOGtrYS3srx93UBWfwC6Ggnouy8p5yAXNYl7tSS52nIsrtuXmHzl3n:khOmTsF93UYfwC6GIoutpYB7tSS5Ctug

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks