Overview

overview

10

Static

static

3

02a7ea4a1b...18.exe

windows7-x64

10

02a7ea4a1b...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    02a7ea4a1ba5e2b0d64c37c90c3f06e2_JaffaCakes118

  • Size

    363KB

  • Sample

    240427-hh9zwadh5x

  • MD5

    02a7ea4a1ba5e2b0d64c37c90c3f06e2

  • SHA1

    d65f1ee3c27c0e7f3bfeb0d48fcf6f3e56eff18f

  • SHA256

    ce1d982e39ff73c1b06205654188e57266553a33a521b404ba7f79a32afbe037

  • SHA512

    5e8e27d28124ae936ec0764e9163e3aabfac9eed2a0270e42e3206d17e15667b9994f22263d540103f9f75c7aebd8c5991c7fe939a0784147d4716a70273b485

  • SSDEEP

    3072:PhOm2sI93UufdC67cihfmCiiiXAsACF486jFX8fkYtB6J6q1K7r:Pcm7ImGddXtWrXD486jFX88Y/MK7r

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      02a7ea4a1ba5e2b0d64c37c90c3f06e2_JaffaCakes118

    • Size

      363KB

    • MD5

      02a7ea4a1ba5e2b0d64c37c90c3f06e2

    • SHA1

      d65f1ee3c27c0e7f3bfeb0d48fcf6f3e56eff18f

    • SHA256

      ce1d982e39ff73c1b06205654188e57266553a33a521b404ba7f79a32afbe037

    • SHA512

      5e8e27d28124ae936ec0764e9163e3aabfac9eed2a0270e42e3206d17e15667b9994f22263d540103f9f75c7aebd8c5991c7fe939a0784147d4716a70273b485

    • SSDEEP

      3072:PhOm2sI93UufdC67cihfmCiiiXAsACF486jFX8fkYtB6J6q1K7r:Pcm7ImGddXtWrXD486jFX88Y/MK7r

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks