Overview

overview

10

Static

static

3

60dcae1fae...18.exe

windows7-x64

10

60dcae1fae...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    60dcae1fae996736f647fa8280065e65_JaffaCakes118

  • Size

    386KB

  • Sample

    240520-yhvg7aee22

  • MD5

    60dcae1fae996736f647fa8280065e65

  • SHA1

    7aeb8ff842ff4b1fb8c609b495dbd7a0966aabd3

  • SHA256

    bb683d400ba7da06fea8265438f9f2da38cb60c2c5d1dfe0ecf7243ac58a7068

  • SHA512

    5f1002a3b4a34033f07b442ada15b693ae142227ad3a3fd8e9ecc82bce45455c06284cf6e3968b8af1a577716c75748e7e299c51e3ce9f939c61c5c8348acffa

  • SSDEEP

    3072:8hOm2sI93UufdC67cimD5t251UrRE9TTFw8TCvtcM72o+:8cm7ImGddXmNt251UriZFwGCvVQ

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      60dcae1fae996736f647fa8280065e65_JaffaCakes118

    • Size

      386KB

    • MD5

      60dcae1fae996736f647fa8280065e65

    • SHA1

      7aeb8ff842ff4b1fb8c609b495dbd7a0966aabd3

    • SHA256

      bb683d400ba7da06fea8265438f9f2da38cb60c2c5d1dfe0ecf7243ac58a7068

    • SHA512

      5f1002a3b4a34033f07b442ada15b693ae142227ad3a3fd8e9ecc82bce45455c06284cf6e3968b8af1a577716c75748e7e299c51e3ce9f939c61c5c8348acffa

    • SSDEEP

      3072:8hOm2sI93UufdC67cimD5t251UrRE9TTFw8TCvtcM72o+:8cm7ImGddXmNt251UriZFwGCvVQ

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks