General

  • Target

    0036abd78b5af4b6a0a098a2d7a15a0b_JaffaCakes118

  • Size

    94KB

  • Sample

    240727-y3x4tawbrr

  • MD5

    0036abd78b5af4b6a0a098a2d7a15a0b

  • SHA1

    46d3f939be654b6f8b25b895488211be4af6d163

  • SHA256

    7439c7685be9b079e1045f93c6c5b82141edb439369b5bb24a1cf8158afab965

  • SHA512

    f9aa606eb5d590ec465d86590e5a17ff4cd97f0509fa1943ae13720ca017edba67fdb5ed2b2765e86878903d4c1d73cb2a14254ac44c230de912a6620d4b28c3

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND+3T4+mzv7oEzNcI2gxprr4H8You:ymb3NkkiQ3mdBjF+3TYzvTbrr4H/

Malware Config

Targets

    • Target

      0036abd78b5af4b6a0a098a2d7a15a0b_JaffaCakes118

    • Size

      94KB

    • MD5

      0036abd78b5af4b6a0a098a2d7a15a0b

    • SHA1

      46d3f939be654b6f8b25b895488211be4af6d163

    • SHA256

      7439c7685be9b079e1045f93c6c5b82141edb439369b5bb24a1cf8158afab965

    • SHA512

      f9aa606eb5d590ec465d86590e5a17ff4cd97f0509fa1943ae13720ca017edba67fdb5ed2b2765e86878903d4c1d73cb2a14254ac44c230de912a6620d4b28c3

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND+3T4+mzv7oEzNcI2gxprr4H8You:ymb3NkkiQ3mdBjF+3TYzvTbrr4H/

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks