Overview

overview

10

Static

static

3

042c98f194...18.exe

windows7-x64

10

042c98f194...18.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    042c98f19428ec8a191794325206de3b_JaffaCakes118

  • Size

    139KB

  • Sample

    240428-cxngjaee8y

  • MD5

    042c98f19428ec8a191794325206de3b

  • SHA1

    1081642f55054153385e4edae01fabdcadc62911

  • SHA256

    533efb70d89d37d6bfd475fb63dc7f83d5918639d2f634c426802d805ece5cde

  • SHA512

    c064c873572bb26baf6e1a13cd4e69265a22b8ea8208b7aae0aaa6564b744005d87e5594b69eb33702c1bbf78757cfbb7cf5f5affe5bcc17142cc0ed7291c59e

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFWXkj7afoHVpx+dGoH//UAAX:n3C9BRW0j/1px+dGkHUAAX

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      042c98f19428ec8a191794325206de3b_JaffaCakes118

    • Size

      139KB

    • MD5

      042c98f19428ec8a191794325206de3b

    • SHA1

      1081642f55054153385e4edae01fabdcadc62911

    • SHA256

      533efb70d89d37d6bfd475fb63dc7f83d5918639d2f634c426802d805ece5cde

    • SHA512

      c064c873572bb26baf6e1a13cd4e69265a22b8ea8208b7aae0aaa6564b744005d87e5594b69eb33702c1bbf78757cfbb7cf5f5affe5bcc17142cc0ed7291c59e

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFWXkj7afoHVpx+dGoH//UAAX:n3C9BRW0j/1px+dGkHUAAX

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks