General

  • Target

    02bbb7293c597c56b62a7af045fa1315_JaffaCakes118

  • Size

    211KB

  • Sample

    240727-3q6mmsycme

  • MD5

    02bbb7293c597c56b62a7af045fa1315

  • SHA1

    cfbeb38ea88bc2ff35019ee8004eb180e9435d30

  • SHA256

    706c2afeb8eedd4ce52275ee3906d303f4a3db43e738153c0ba23f7c99a91bf5

  • SHA512

    d7b2e02421b2003349c11e1f1b65b9f87e40a22e9b63c913bb173a08c75790b975ac2cf9b69f604ad5e579dbf6b84f00d2cf1765d3c9f3ac17ef2724dcb09ba9

  • SSDEEP

    3072:EhOm2sI93UufdC67ciyt3ujFf7TQsq5VaQvytQW7:Ecm7ImGddXyt38TU5LW

Malware Config

Targets

    • Target

      02bbb7293c597c56b62a7af045fa1315_JaffaCakes118

    • Size

      211KB

    • MD5

      02bbb7293c597c56b62a7af045fa1315

    • SHA1

      cfbeb38ea88bc2ff35019ee8004eb180e9435d30

    • SHA256

      706c2afeb8eedd4ce52275ee3906d303f4a3db43e738153c0ba23f7c99a91bf5

    • SHA512

      d7b2e02421b2003349c11e1f1b65b9f87e40a22e9b63c913bb173a08c75790b975ac2cf9b69f604ad5e579dbf6b84f00d2cf1765d3c9f3ac17ef2724dcb09ba9

    • SSDEEP

      3072:EhOm2sI93UufdC67ciyt3ujFf7TQsq5VaQvytQW7:Ecm7ImGddXyt38TU5LW

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks