General

  • Target

    7588a0df8373995a99fc0efadfbae81f_JaffaCakes118

  • Size

    80KB

  • Sample

    240726-yxb96asanm

  • MD5

    7588a0df8373995a99fc0efadfbae81f

  • SHA1

    47179520e3d3520038a3901ff568c7a00761b724

  • SHA256

    38202b5510ce6e687b7b9cb882c51b55d368108a5d479799de68f1df094e9830

  • SHA512

    142e145589dea68e39aff5983a4bae2e84e9e291801eefbd5d94c15623b5f6700b580c58dcd93adab9a339815edaa87487cef53c1f5c1438d07db2dc92a3a0c6

  • SSDEEP

    768:DMFz18Cn+Im/aVtQeUMQ9adrva2Vru5dCnrcqbGfzHWxZ:a/m/2tFUMRdri2VydCrhSfyxZ

Malware Config

Targets

    • Target

      7588a0df8373995a99fc0efadfbae81f_JaffaCakes118

    • Size

      80KB

    • MD5

      7588a0df8373995a99fc0efadfbae81f

    • SHA1

      47179520e3d3520038a3901ff568c7a00761b724

    • SHA256

      38202b5510ce6e687b7b9cb882c51b55d368108a5d479799de68f1df094e9830

    • SHA512

      142e145589dea68e39aff5983a4bae2e84e9e291801eefbd5d94c15623b5f6700b580c58dcd93adab9a339815edaa87487cef53c1f5c1438d07db2dc92a3a0c6

    • SSDEEP

      768:DMFz18Cn+Im/aVtQeUMQ9adrva2Vru5dCnrcqbGfzHWxZ:a/m/2tFUMRdri2VydCrhSfyxZ

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Blocklisted process makes network request

MITRE ATT&CK Enterprise v15

Tasks