General

  • Target

    0207be56172ef24acfda330d48fd7c8c_JaffaCakes118

  • Size

    232KB

  • Sample

    240427-a358esgc8x

  • MD5

    0207be56172ef24acfda330d48fd7c8c

  • SHA1

    be59f20aa13224a4f245c3c0e50eccfeed1bbece

  • SHA256

    3a9a57d586141522128c8fb98ca1c1846d63309816a38b3672c7a743d90c0feb

  • SHA512

    e3d55842c24a72580789c9289d812682bb1bbc24ecba1c4a334e8c44044c6094211b7ed4554ef596b5b74e57492f22b879d54f2b17c7ec931ef60e13b9041404

  • SSDEEP

    3072:ThOmTsF93UYfwC6GIout0fmCiiiXAsACF486jFX8fkYtB6J6eUTV4qQG4:Tcm4FmowdHoSgWrXD486jFX88Y/eUBY

Malware Config

Targets

    • Target

      0207be56172ef24acfda330d48fd7c8c_JaffaCakes118

    • Size

      232KB

    • MD5

      0207be56172ef24acfda330d48fd7c8c

    • SHA1

      be59f20aa13224a4f245c3c0e50eccfeed1bbece

    • SHA256

      3a9a57d586141522128c8fb98ca1c1846d63309816a38b3672c7a743d90c0feb

    • SHA512

      e3d55842c24a72580789c9289d812682bb1bbc24ecba1c4a334e8c44044c6094211b7ed4554ef596b5b74e57492f22b879d54f2b17c7ec931ef60e13b9041404

    • SSDEEP

      3072:ThOmTsF93UYfwC6GIout0fmCiiiXAsACF486jFX8fkYtB6J6eUTV4qQG4:Tcm4FmowdHoSgWrXD486jFX88Y/eUBY

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks