Overview

overview

10

Static

static

7

5d166d7087...18.dll

windows7-x64

10

5d166d7087...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5d166d70872fc980fd4841c6ba7823ea_JaffaCakes118

  • Size

    3.0MB

  • Sample

    240520-emgbksag82

  • MD5

    5d166d70872fc980fd4841c6ba7823ea

  • SHA1

    78a6e2edc57afbe14383a2938e92af90d5a8b8c3

  • SHA256

    79a392feef17c2efe5616ef0d7d0b94ae1d796677c227e09f8b5f5451c500b19

  • SHA512

    673e3694802a4ce63e544a5083545fa2df8af51230f2050a207ecc98af497f5c6ba9a8505e5726f2752f78dfc1bda7b89304e5de8da497c50ac3eda0c24557a4

  • SSDEEP

    49152:HYmFpKMBznrnNjDoqIMSlePda3HITUYVUanQcj4wjNW6+qUIF5Hw+:4mewrnJDoqIT3XIgYV3HjJjNoOB

Score
10/10
blackmoonbankertrojanvmprotect

Malware Config

Targets

    • Target

      5d166d70872fc980fd4841c6ba7823ea_JaffaCakes118

    • Size

      3.0MB

    • MD5

      5d166d70872fc980fd4841c6ba7823ea

    • SHA1

      78a6e2edc57afbe14383a2938e92af90d5a8b8c3

    • SHA256

      79a392feef17c2efe5616ef0d7d0b94ae1d796677c227e09f8b5f5451c500b19

    • SHA512

      673e3694802a4ce63e544a5083545fa2df8af51230f2050a207ecc98af497f5c6ba9a8505e5726f2752f78dfc1bda7b89304e5de8da497c50ac3eda0c24557a4

    • SSDEEP

      49152:HYmFpKMBznrnNjDoqIMSlePda3HITUYVUanQcj4wjNW6+qUIF5Hw+:4mewrnJDoqIT3XIgYV3HjJjNoOB

    Score
    10/10
    blackmoonbankertrojanvmprotect

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks