Overview

overview

10

Static

static

3

02b4caef6b...18.exe

windows7-x64

10

02b4caef6b...18.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    02b4caef6bd4e69332b583ac06c1f558_JaffaCakes118

  • Size

    96KB

  • Sample

    240427-h5er9aec8s

  • MD5

    02b4caef6bd4e69332b583ac06c1f558

  • SHA1

    9652a167d99fb9b93ab47cfe36bf1c07a9c7d072

  • SHA256

    4fcef8fc484b7057c32467b697edebf43c754d7131780f2e53fa75248e98d2fe

  • SHA512

    e1c0fc15bd36d2a41b10af202fbcf89bd2e0f57c1de2a0d945b3863060dc826d20f637ec2720c38d735985ce5bae10fd76b9ec9fbef9c438c762e602ec567d99

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFIVLd2hWZGreRCUlbOgWjM:n3C9BRIVLdPWjM

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      02b4caef6bd4e69332b583ac06c1f558_JaffaCakes118

    • Size

      96KB

    • MD5

      02b4caef6bd4e69332b583ac06c1f558

    • SHA1

      9652a167d99fb9b93ab47cfe36bf1c07a9c7d072

    • SHA256

      4fcef8fc484b7057c32467b697edebf43c754d7131780f2e53fa75248e98d2fe

    • SHA512

      e1c0fc15bd36d2a41b10af202fbcf89bd2e0f57c1de2a0d945b3863060dc826d20f637ec2720c38d735985ce5bae10fd76b9ec9fbef9c438c762e602ec567d99

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFIVLd2hWZGreRCUlbOgWjM:n3C9BRIVLdPWjM

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks