Overview

overview

10

Static

static

10

使用说明.url

windows7-x64

1

使用说明.url

windows10-2004-x64

1

极速软�...��.url

windows7-x64

1

极速软�...��.url

windows10-2004-x64

1

骨头批�...��.exe

windows7-x64

10

骨头批�...��.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aea528e9c8c94f17ed7519a233b44ba3_JaffaCakes118

  • Size

    1.1MB

  • Sample

    240615-qr76mswdpj

  • MD5

    aea528e9c8c94f17ed7519a233b44ba3

  • SHA1

    c31016df1bc5b688dc0e2ad4d8ca8478a55cc64c

  • SHA256

    3876dc9bcd47bbd960f2df06be95b808fe6734c168515f1d385732e21cd54100

  • SHA512

    872958e6fd3d44b42bebdc5e396894ca794b3eb702e57c9b27d29a18a6222f6f846647d09d282d2af1a0f07cba9adf7c9a6c8c188fe0acdc1e7933f7f038a93f

  • SSDEEP

    24576:f8QFd3wVK0vCVCwTi/coo9Lp3iTno7WV/G6T8KeYKQfGNr2NO:0QFEOCwekX9NHKZYKeYffGak

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      使用说明.url

    • Size

      126B

    • MD5

      59b9685cba5d2ac1b35f7eee4a17fa33

    • SHA1

      68530715b329fedf68518267634094c35d51a9e9

    • SHA256

      46df9d8dad577577f3da4a6eefeb531616614f62fee20e9de3adbb088d0bfed7

    • SHA512

      a7f8b6b5bf1978a95195f79bcf1acdb027a737edd70a338adef8a095703cf11c4370fd86c861e802db7d7bb751aee0aee1d58149d62044802ef987c4149719e0

    Score
    1/10
    behavioral1behavioral2

    • Target

      极速软件下载.url

    • Size

      331B

    • MD5

      48195bcd2fcc73d4ed844ff646587232

    • SHA1

      0fc74b362d3dcdb639cd86a01e7c4e3c2c0fecc6

    • SHA256

      49c1ace06a959cf0600de6526917ad47efa7a69860c6372226e295ae451c10f8

    • SHA512

      28a341d90b11526a8ca30ac1221eb08f57ae00a9c7fab17043f390009ce8f0e4fb4b05040269aeffd6276d8fdf114cbec697997875d33dbc9776220aea490d0b

    Score
    1/10
    behavioral3behavioral4

    • Target

      骨头批量QQ空间动态圈人秒赞助手.exe

    • Size

      1.2MB

    • MD5

      5e1ea92fa967eb1eb98bfe1469960f05

    • SHA1

      b29157abf996b87fe29bcbe6d82d6e7928623350

    • SHA256

      3dd25a8449585f08a3493f892663c68a41a7fb4b8d6924e7145c2833742902e9

    • SHA512

      2505df65506d82264ffb4756eede0153b54e5db409d55c265391e3beae33bf45ca4ff77611aa2157b18a54f3ac90bbaf442fa0db065bd0ada3f0fe2911aada55

    • SSDEEP

      24576:gkcrD+MPN8aEP/Wvioggkg4OVj0WF1VWE+1hE+jDv:2FGaEWixgktOZ0WFfWE+vEE

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral5behavioral6

MITRE ATT&CK Matrix ATT&CK v13

Tasks