Overview

overview

10

Static

static

3

598c56f883...18.exe

windows7-x64

10

598c56f883...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    598c56f883d8ed4f300b2e83f82b579f_JaffaCakes118

  • Size

    199KB

  • Sample

    240519-kqcqfsba6v

  • MD5

    598c56f883d8ed4f300b2e83f82b579f

  • SHA1

    30946e8880cb2c0d744f09dddde8618eaa44ae7d

  • SHA256

    380f7a5bbe70d17421152eb207339b1210bdd3d3fc16eeb0d64d2ce5beb554a7

  • SHA512

    bd8e77268dd4bf5363e6dd4e1fa19cc4d4c3c4285c8e03242b93a85e6fcb3b804084baf7a0f5215dabcd31cc17b7f0dd00c12e1131486e98455fbd75cf7259bf

  • SSDEEP

    1536:PvQBeOGtrYSSsrc93UBIfdC67m6AJiqyvU2r1vsKM4ltJ:PhOm2sI93UufdC67cihvH1SG

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      598c56f883d8ed4f300b2e83f82b579f_JaffaCakes118

    • Size

      199KB

    • MD5

      598c56f883d8ed4f300b2e83f82b579f

    • SHA1

      30946e8880cb2c0d744f09dddde8618eaa44ae7d

    • SHA256

      380f7a5bbe70d17421152eb207339b1210bdd3d3fc16eeb0d64d2ce5beb554a7

    • SHA512

      bd8e77268dd4bf5363e6dd4e1fa19cc4d4c3c4285c8e03242b93a85e6fcb3b804084baf7a0f5215dabcd31cc17b7f0dd00c12e1131486e98455fbd75cf7259bf

    • SSDEEP

      1536:PvQBeOGtrYSSsrc93UBIfdC67m6AJiqyvU2r1vsKM4ltJ:PhOm2sI93UufdC67cihvH1SG

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks