Overview

overview

10

Static

static

3

0767f9d870...18.exe

windows7-x64

10

0767f9d870...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0767f9d87034325e62e6fa9e967c650e_JaffaCakes118

  • Size

    188KB

  • Sample

    240429-l6892age2t

  • MD5

    0767f9d87034325e62e6fa9e967c650e

  • SHA1

    1eee318debcf15d0583fb4c282115d72b431c732

  • SHA256

    a423ffeb394d1f6c833bcb0d7f21dfb4abc92b19db0c83255719d2846762c938

  • SHA512

    6a18065daff329169ab68caebf4139670fa7d7894e7d7eb7c870834aa74e99266ba69cd691bf58fb3a9c5907f839ca917235e0573915b573c16fde3bd0fee501

  • SSDEEP

    1536:PvQBeOGtrYSSsrc93UBIfdC67m6AJiqgT4+C2HVMc:PhOm2sI93UufdC67ciJTU2HVB

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      0767f9d87034325e62e6fa9e967c650e_JaffaCakes118

    • Size

      188KB

    • MD5

      0767f9d87034325e62e6fa9e967c650e

    • SHA1

      1eee318debcf15d0583fb4c282115d72b431c732

    • SHA256

      a423ffeb394d1f6c833bcb0d7f21dfb4abc92b19db0c83255719d2846762c938

    • SHA512

      6a18065daff329169ab68caebf4139670fa7d7894e7d7eb7c870834aa74e99266ba69cd691bf58fb3a9c5907f839ca917235e0573915b573c16fde3bd0fee501

    • SSDEEP

      1536:PvQBeOGtrYSSsrc93UBIfdC67m6AJiqgT4+C2HVMc:PhOm2sI93UufdC67ciJTU2HVB

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks