Overview

overview

10

Static

static

3

02a54baaeb...18.exe

windows7-x64

10

02a54baaeb...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    02a54baaeb1cd5ca3d7d14a7292f3532_JaffaCakes118

  • Size

    420KB

  • Sample

    240427-hdp4xadg5z

  • MD5

    02a54baaeb1cd5ca3d7d14a7292f3532

  • SHA1

    d7fc6bc3c4751811d33f7e63432effe81074a2bb

  • SHA256

    344c940f925ba8324fc12bc975dc05b9c702f13bfeca3f0604b3ed53fa6fa45c

  • SHA512

    f48ede5fad7f7aecd5d9e05a89fb7a5ae56a4cdde7f49c52e150e85bfd7cc1143a3fe3333c20b1761beb32d3d40c3eae552701181ec8845cb8cf99f20ed2b03d

  • SSDEEP

    3072:8hOm2sI93UufdC67cimD5t251UrRE9TTFwD7arnDX+X5l5ay7:8cm7ImGddXmNt251UriZFwfsDX+XtL7

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      02a54baaeb1cd5ca3d7d14a7292f3532_JaffaCakes118

    • Size

      420KB

    • MD5

      02a54baaeb1cd5ca3d7d14a7292f3532

    • SHA1

      d7fc6bc3c4751811d33f7e63432effe81074a2bb

    • SHA256

      344c940f925ba8324fc12bc975dc05b9c702f13bfeca3f0604b3ed53fa6fa45c

    • SHA512

      f48ede5fad7f7aecd5d9e05a89fb7a5ae56a4cdde7f49c52e150e85bfd7cc1143a3fe3333c20b1761beb32d3d40c3eae552701181ec8845cb8cf99f20ed2b03d

    • SSDEEP

      3072:8hOm2sI93UufdC67cimD5t251UrRE9TTFwD7arnDX+X5l5ay7:8cm7ImGddXmNt251UriZFwfsDX+XtL7

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks