General

  • Target

    073440ca842e8715d0a371b27e8870d4_JaffaCakes118

  • Size

    386KB

  • Sample

    240429-j34t2aea83

  • MD5

    073440ca842e8715d0a371b27e8870d4

  • SHA1

    a8ed3e63fabd3ec14f7f8905d57bf2890ee276fe

  • SHA256

    36a48eeb8de8d308dfc5321358ac3bc4289105c114e6fb71238a6509c3029b54

  • SHA512

    bc948775c40d9d06292c828a4c4ed5aaee559301d1c1749a769b454ff62612c4e1817ff79bd7e44c485a8c3396fb74e6e17ae3210b813b4b1e50eb0680679046

  • SSDEEP

    3072:8hOm2sI93UufdC67cimD5t251UrRE9TTFw8TCvtcM72o+:8cm7ImGddXmNt251UriZFwGCvVM

Malware Config

Targets

    • Target

      073440ca842e8715d0a371b27e8870d4_JaffaCakes118

    • Size

      386KB

    • MD5

      073440ca842e8715d0a371b27e8870d4

    • SHA1

      a8ed3e63fabd3ec14f7f8905d57bf2890ee276fe

    • SHA256

      36a48eeb8de8d308dfc5321358ac3bc4289105c114e6fb71238a6509c3029b54

    • SHA512

      bc948775c40d9d06292c828a4c4ed5aaee559301d1c1749a769b454ff62612c4e1817ff79bd7e44c485a8c3396fb74e6e17ae3210b813b4b1e50eb0680679046

    • SSDEEP

      3072:8hOm2sI93UufdC67cimD5t251UrRE9TTFw8TCvtcM72o+:8cm7ImGddXmNt251UriZFwGCvVM

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks