Overview

overview

10

Static

static

3

681146f9ed...18.exe

windows7-x64

10

681146f9ed...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    681146f9edea18bd7b89a324404989f7_JaffaCakes118

  • Size

    203KB

  • Sample

    240522-v722saaf79

  • MD5

    681146f9edea18bd7b89a324404989f7

  • SHA1

    67e9993dd3a404fc8675317ba4a5e33152974918

  • SHA256

    dab8440bba0fed6c322bfcec169d177da7e81fa081f7df775bc7a84b51137339

  • SHA512

    ee1d75684f6332d49a9720bb065f42e7b1dc8561c90bad6df22f7457ebee56ceae0da12d1394f18086039e5e955b496e88fbe8b3dab2e8ced4187394be3d2761

  • SSDEEP

    1536:PvQBeOGtrYSSsrc93UBIfdC67m6AJiqyEzOICBZHFS15NV70wiww:PhOm2sI93UufdC67cihEzoY3NS

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      681146f9edea18bd7b89a324404989f7_JaffaCakes118

    • Size

      203KB

    • MD5

      681146f9edea18bd7b89a324404989f7

    • SHA1

      67e9993dd3a404fc8675317ba4a5e33152974918

    • SHA256

      dab8440bba0fed6c322bfcec169d177da7e81fa081f7df775bc7a84b51137339

    • SHA512

      ee1d75684f6332d49a9720bb065f42e7b1dc8561c90bad6df22f7457ebee56ceae0da12d1394f18086039e5e955b496e88fbe8b3dab2e8ced4187394be3d2761

    • SSDEEP

      1536:PvQBeOGtrYSSsrc93UBIfdC67m6AJiqyEzOICBZHFS15NV70wiww:PhOm2sI93UufdC67cihEzoY3NS

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks