General

  • Target

    08ffac908feba4ec5c98de62dbbb5675_JaffaCakes118

  • Size

    73KB

  • Sample

    240430-ev281scf3y

  • MD5

    08ffac908feba4ec5c98de62dbbb5675

  • SHA1

    7e46ab811b0daa55abbc6131b26d6d482371ff5d

  • SHA256

    30b44745dd4b271b93a12b71a74f4083c397d11ec56635993e8851dc8bb701a7

  • SHA512

    eb4aecd010c923a71e147036b5277900ad64cdf652ef19e856ddd05a5a486e51b41680d357367224144423682f332affd3bfd25c782e8a5fa89677214440b0ec

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND+3T4+DQmqc7EfmV+LS:ymb3NkkiQ3mdBjF+3TCg7Ph

Malware Config

Targets

    • Target

      08ffac908feba4ec5c98de62dbbb5675_JaffaCakes118

    • Size

      73KB

    • MD5

      08ffac908feba4ec5c98de62dbbb5675

    • SHA1

      7e46ab811b0daa55abbc6131b26d6d482371ff5d

    • SHA256

      30b44745dd4b271b93a12b71a74f4083c397d11ec56635993e8851dc8bb701a7

    • SHA512

      eb4aecd010c923a71e147036b5277900ad64cdf652ef19e856ddd05a5a486e51b41680d357367224144423682f332affd3bfd25c782e8a5fa89677214440b0ec

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND+3T4+DQmqc7EfmV+LS:ymb3NkkiQ3mdBjF+3TCg7Ph

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks