General

  • Target

    0293562fc08b3d6f119358b1579455f6_JaffaCakes118

  • Size

    188KB

  • Sample

    240727-3kte5axhrb

  • MD5

    0293562fc08b3d6f119358b1579455f6

  • SHA1

    4c7a7a7c3cf58d624824673563b9a5369e4d26a8

  • SHA256

    27174d51f577b3df4be575905c9937e319c0001ec6bd839976f9c16f5abbe7e9

  • SHA512

    fbb8644a4210bd44f7eb09dd1244e93393d5a077597fdd79bee099918bde71f237ede89c8e02d2972e6a7067a079da19ebe11da4b8b3e5932813ebd87ade5a41

  • SSDEEP

    1536:EvQBeOGtrYSSsrc93UBIfdC67m6AJiqjt3ufT/FRxZOYy9NW:EhOm2sI93UufdC67ciyt3ujFf7y3W

Malware Config

Targets

    • Target

      0293562fc08b3d6f119358b1579455f6_JaffaCakes118

    • Size

      188KB

    • MD5

      0293562fc08b3d6f119358b1579455f6

    • SHA1

      4c7a7a7c3cf58d624824673563b9a5369e4d26a8

    • SHA256

      27174d51f577b3df4be575905c9937e319c0001ec6bd839976f9c16f5abbe7e9

    • SHA512

      fbb8644a4210bd44f7eb09dd1244e93393d5a077597fdd79bee099918bde71f237ede89c8e02d2972e6a7067a079da19ebe11da4b8b3e5932813ebd87ade5a41

    • SSDEEP

      1536:EvQBeOGtrYSSsrc93UBIfdC67m6AJiqjt3ufT/FRxZOYy9NW:EhOm2sI93UufdC67ciyt3ujFf7y3W

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks