General

  • Target

    55dab3e21fcd8d1aa31978549b6c74a8_JaffaCakes118

  • Size

    92KB

  • Sample

    240518-vpj39aeb22

  • MD5

    55dab3e21fcd8d1aa31978549b6c74a8

  • SHA1

    26dfa245e370b4fc2b734a0dc3cc576b5d2c6ea9

  • SHA256

    45711aad0766e11260e2748614c70601392bf9473cd76e6302ca1ae45b5f26a6

  • SHA512

    faf085c263f38232e8ef1f2ddcbeb1e6b7d1343d0d5c54fab1ee7a4615460f91920f6133f7b7a76b233e91e99abea3f0e7335285e58cc2cb92cef01ffe54a74c

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDWiekja1br3GGBxfot5lmKaZNkQe:ymb3NkkiQ3mdBjFWXkj7afo4ZERB

Malware Config

Targets

    • Target

      55dab3e21fcd8d1aa31978549b6c74a8_JaffaCakes118

    • Size

      92KB

    • MD5

      55dab3e21fcd8d1aa31978549b6c74a8

    • SHA1

      26dfa245e370b4fc2b734a0dc3cc576b5d2c6ea9

    • SHA256

      45711aad0766e11260e2748614c70601392bf9473cd76e6302ca1ae45b5f26a6

    • SHA512

      faf085c263f38232e8ef1f2ddcbeb1e6b7d1343d0d5c54fab1ee7a4615460f91920f6133f7b7a76b233e91e99abea3f0e7335285e58cc2cb92cef01ffe54a74c

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDWiekja1br3GGBxfot5lmKaZNkQe:ymb3NkkiQ3mdBjFWXkj7afo4ZERB

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks