General

  • Target

    16710183c9f7b074c19c73584c9536db_JaffaCakes118

  • Size

    400KB

  • Sample

    240505-hfjpxadc73

  • MD5

    16710183c9f7b074c19c73584c9536db

  • SHA1

    8c795671c0179ddba613d703579518d82266107c

  • SHA256

    34b8fc789b121f007058329ca7d79484968c143e7430632a6d52c4632c5eeea3

  • SHA512

    63d3da2188103358b3bae6d2beea55948650b762754ef613ffdf23498e3b06d4245304dc17ba33dc287ba389b386b7b84ab3c0c21a0649a77cdbd0122971f7af

  • SSDEEP

    3072:8hOm2sI93UufdC67cimD5t251UrRE9TTFwzWGeaSRnv4bd3uXK:8cm7ImGddXmNt251UriZFwCJFngbUK

Malware Config

Targets

    • Target

      16710183c9f7b074c19c73584c9536db_JaffaCakes118

    • Size

      400KB

    • MD5

      16710183c9f7b074c19c73584c9536db

    • SHA1

      8c795671c0179ddba613d703579518d82266107c

    • SHA256

      34b8fc789b121f007058329ca7d79484968c143e7430632a6d52c4632c5eeea3

    • SHA512

      63d3da2188103358b3bae6d2beea55948650b762754ef613ffdf23498e3b06d4245304dc17ba33dc287ba389b386b7b84ab3c0c21a0649a77cdbd0122971f7af

    • SSDEEP

      3072:8hOm2sI93UufdC67cimD5t251UrRE9TTFwzWGeaSRnv4bd3uXK:8cm7ImGddXmNt251UriZFwCJFngbUK

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks