Overview

overview

10

Static

static

3

050593c593...18.exe

windows7-x64

10

050593c593...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    050593c59337c417064c9cbb71f65e83_JaffaCakes118

  • Size

    425KB

  • Sample

    240428-mww3dsdh93

  • MD5

    050593c59337c417064c9cbb71f65e83

  • SHA1

    86b13d6da17a2a01e2e0dd2101a762f8ce431e74

  • SHA256

    dd0a3a056143dca1974101d6a85e51befe16d08d0e1fce50c4e0798435fd994f

  • SHA512

    43f14aa5dc1b2fe1f0f174b6107201ae0939529d1723f99bf8acdd5465309a9c774b6d0ac5720665873eb2d82d91413cc3e220c089525f43c481589ea328e1eb

  • SSDEEP

    3072:8hOm2sI93UufdC67cimD5t251UrRE9TTFwD7arnDX+X5l5V:8cm7ImGddXmNt251UriZFwfsDX+XtV

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      050593c59337c417064c9cbb71f65e83_JaffaCakes118

    • Size

      425KB

    • MD5

      050593c59337c417064c9cbb71f65e83

    • SHA1

      86b13d6da17a2a01e2e0dd2101a762f8ce431e74

    • SHA256

      dd0a3a056143dca1974101d6a85e51befe16d08d0e1fce50c4e0798435fd994f

    • SHA512

      43f14aa5dc1b2fe1f0f174b6107201ae0939529d1723f99bf8acdd5465309a9c774b6d0ac5720665873eb2d82d91413cc3e220c089525f43c481589ea328e1eb

    • SSDEEP

      3072:8hOm2sI93UufdC67cimD5t251UrRE9TTFwD7arnDX+X5l5V:8cm7ImGddXmNt251UriZFwfsDX+XtV

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks