Overview

overview

10

Static

static

3

02966cde22...18.exe

windows7-x64

10

02966cde22...18.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    02966cde221edc545aa122f3c1319914_JaffaCakes118

  • Size

    125KB

  • Sample

    240427-gs1nhsdc9x

  • MD5

    02966cde221edc545aa122f3c1319914

  • SHA1

    ac04aeb57a3431acaef3b8e26238956a5d64f9b9

  • SHA256

    beea1bf635217a3dadfc2d9e513eae534c5694d33cf43ca4e2dc29e94d7a028c

  • SHA512

    3a9898a6e8b50abe09711a304a6cf9201e4086342b16364a7a50fab11e7b29c9945042ebdc05fbf4213cee36d7bb4b1dd3dd7a5d0f5118df4703d71357394499

  • SSDEEP

    3072:vhOm2sI93UufdC67ciIPvZd6fpoRFrDrz4briFQ8K+:vcm7ImGddXUZUf+3Si2+

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      02966cde221edc545aa122f3c1319914_JaffaCakes118

    • Size

      125KB

    • MD5

      02966cde221edc545aa122f3c1319914

    • SHA1

      ac04aeb57a3431acaef3b8e26238956a5d64f9b9

    • SHA256

      beea1bf635217a3dadfc2d9e513eae534c5694d33cf43ca4e2dc29e94d7a028c

    • SHA512

      3a9898a6e8b50abe09711a304a6cf9201e4086342b16364a7a50fab11e7b29c9945042ebdc05fbf4213cee36d7bb4b1dd3dd7a5d0f5118df4703d71357394499

    • SSDEEP

      3072:vhOm2sI93UufdC67ciIPvZd6fpoRFrDrz4briFQ8K+:vcm7ImGddXUZUf+3Si2+

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks