Overview

overview

10

Static

static

3

61379a9da1...18.exe

windows7-x64

10

61379a9da1...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    61379a9da1e3d60709e4ee8da9016857_JaffaCakes118

  • Size

    357KB

  • Sample

    240520-2yq2gsba3y

  • MD5

    61379a9da1e3d60709e4ee8da9016857

  • SHA1

    c679d21ba054ff0c76fbbf550f7719ebb98fd810

  • SHA256

    396855475980ffea73fea4755ea8a3d82b16ba6a2aadd933fee24196def4adf4

  • SHA512

    77156f900f17de1f2dcd06df3af667b1bd2d953e0217195fc64bfa47b237b412d94eab9924a1f29999572df6c164f05697971c71d15d5a4d7e79cd468b292a33

  • SSDEEP

    3072:PhOm2sI93UufdC67cihfmCiiiXAsACF486jFX8fkYtB6J6eUTV4aTHDaLB:Pcm7ImGddXtWrXD486jFX88Y/eUBni

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      61379a9da1e3d60709e4ee8da9016857_JaffaCakes118

    • Size

      357KB

    • MD5

      61379a9da1e3d60709e4ee8da9016857

    • SHA1

      c679d21ba054ff0c76fbbf550f7719ebb98fd810

    • SHA256

      396855475980ffea73fea4755ea8a3d82b16ba6a2aadd933fee24196def4adf4

    • SHA512

      77156f900f17de1f2dcd06df3af667b1bd2d953e0217195fc64bfa47b237b412d94eab9924a1f29999572df6c164f05697971c71d15d5a4d7e79cd468b292a33

    • SSDEEP

      3072:PhOm2sI93UufdC67cihfmCiiiXAsACF486jFX8fkYtB6J6eUTV4aTHDaLB:Pcm7ImGddXtWrXD486jFX88Y/eUBni

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks