Overview

overview

10

Static

static

3

63a3c23d75...18.exe

windows7-x64

10

63a3c23d75...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    63a3c23d75e6fd118022803568ca5570_JaffaCakes118

  • Size

    65KB

  • Sample

    240521-ryfkmshd8y

  • MD5

    63a3c23d75e6fd118022803568ca5570

  • SHA1

    74c82fa7d45524cdfe37b8c5a4baefee6f8aaccc

  • SHA256

    ff0571504d446fc10182a2b295723ff960f36db1313efc6a049951a28732dffb

  • SHA512

    f9f3a4d2c1ceb4803476470dfd1e9a8c52bddf03e4b6501583b4fccb020db468b1b0d71f13722ad02d0771c20a1414f92a6e161c06a9760eb35db810489169a6

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIuyWNSW:ymb3NkkiQ3mdBjFIuyWd

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      63a3c23d75e6fd118022803568ca5570_JaffaCakes118

    • Size

      65KB

    • MD5

      63a3c23d75e6fd118022803568ca5570

    • SHA1

      74c82fa7d45524cdfe37b8c5a4baefee6f8aaccc

    • SHA256

      ff0571504d446fc10182a2b295723ff960f36db1313efc6a049951a28732dffb

    • SHA512

      f9f3a4d2c1ceb4803476470dfd1e9a8c52bddf03e4b6501583b4fccb020db468b1b0d71f13722ad02d0771c20a1414f92a6e161c06a9760eb35db810489169a6

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIuyWNSW:ymb3NkkiQ3mdBjFIuyWd

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks