Overview

overview

10

Static

static

3

7bb48953ab...18.exe

windows7-x64

10

7bb48953ab...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    7bb48953abaf6064bbf11b43d98f43a1_JaffaCakes118

  • Size

    203KB

  • Sample

    240528-e5sgkaef6x

  • MD5

    7bb48953abaf6064bbf11b43d98f43a1

  • SHA1

    fef739bc75a47c065d829dee49e0f8726b00eb84

  • SHA256

    b48857c1711bc97ed000dcfc83c4576c7888d9cde0d6c25f99eb0ecee9cfd9a3

  • SHA512

    46f00833565c1bd00acddc527b397ed575f3d7271af14e1a6f9fbf684d35e0e6ad378d4223c8aae3bfb7743cbca8180e2a8308f53dc6d86cc5bded01422cf7be

  • SSDEEP

    1536:PvQBeOGtrYSSsrc93UBIfdC67m6AJiqyEzOICBZHFS15NV70wiwg:PhOm2sI93UufdC67cihEzoY3N6

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      7bb48953abaf6064bbf11b43d98f43a1_JaffaCakes118

    • Size

      203KB

    • MD5

      7bb48953abaf6064bbf11b43d98f43a1

    • SHA1

      fef739bc75a47c065d829dee49e0f8726b00eb84

    • SHA256

      b48857c1711bc97ed000dcfc83c4576c7888d9cde0d6c25f99eb0ecee9cfd9a3

    • SHA512

      46f00833565c1bd00acddc527b397ed575f3d7271af14e1a6f9fbf684d35e0e6ad378d4223c8aae3bfb7743cbca8180e2a8308f53dc6d86cc5bded01422cf7be

    • SSDEEP

      1536:PvQBeOGtrYSSsrc93UBIfdC67m6AJiqyEzOICBZHFS15NV70wiwg:PhOm2sI93UufdC67cihEzoY3N6

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks