Overview

overview

10

Static

static

3

59d3c40913...18.exe

windows7-x64

10

59d3c40913...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    59d3c40913a595d1019d32c743a2414f_JaffaCakes118

  • Size

    92KB

  • Sample

    240519-l1y7wadb6v

  • MD5

    59d3c40913a595d1019d32c743a2414f

  • SHA1

    40d37621bc7148fd965dcb8c85ad5df19f2e52b3

  • SHA256

    b4026db66ffdf720c1b6127e77531ce3ead54bfa5d673473a8597a7f022fab98

  • SHA512

    51b97370b00f9ccf6b4a01d6751722a4a16a69c95034e18a310ebac605038695d915f67253597730a70aff3874655e2341aabb375c47bd5e80e3d353e7b260c1

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDWiekja1br3GGBxfot5lmKaZNkQo:ymb3NkkiQ3mdBjFWXkj7afo4ZERH

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      59d3c40913a595d1019d32c743a2414f_JaffaCakes118

    • Size

      92KB

    • MD5

      59d3c40913a595d1019d32c743a2414f

    • SHA1

      40d37621bc7148fd965dcb8c85ad5df19f2e52b3

    • SHA256

      b4026db66ffdf720c1b6127e77531ce3ead54bfa5d673473a8597a7f022fab98

    • SHA512

      51b97370b00f9ccf6b4a01d6751722a4a16a69c95034e18a310ebac605038695d915f67253597730a70aff3874655e2341aabb375c47bd5e80e3d353e7b260c1

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDWiekja1br3GGBxfot5lmKaZNkQo:ymb3NkkiQ3mdBjFWXkj7afo4ZERH

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks