General

  • Target

    041667adfcb9e1fc858368972dd64415_JaffaCakes118

  • Size

    232KB

  • Sample

    240728-a6tnss1ejd

  • MD5

    041667adfcb9e1fc858368972dd64415

  • SHA1

    0020a43748a3524dfe3bb27d60737b01f3ba8a54

  • SHA256

    e414315b3de7900b1fa8319b5529830faf67c2909ea2795441d1ab9906fc5dbd

  • SHA512

    3618ffa8ff037165ba6383a77807ba73d567cf7e3989f180883f0fcc090cb99dbb05ceca9741e36fee8d179e6b136f3353d61c086de4899b487588da9f21e267

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFo73PYP1lri3KoSV31QNVrAIwsX:n3C9BRo7MlrWKo+l0r5wsX

Malware Config

Targets

    • Target

      041667adfcb9e1fc858368972dd64415_JaffaCakes118

    • Size

      232KB

    • MD5

      041667adfcb9e1fc858368972dd64415

    • SHA1

      0020a43748a3524dfe3bb27d60737b01f3ba8a54

    • SHA256

      e414315b3de7900b1fa8319b5529830faf67c2909ea2795441d1ab9906fc5dbd

    • SHA512

      3618ffa8ff037165ba6383a77807ba73d567cf7e3989f180883f0fcc090cb99dbb05ceca9741e36fee8d179e6b136f3353d61c086de4899b487588da9f21e267

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFo73PYP1lri3KoSV31QNVrAIwsX:n3C9BRo7MlrWKo+l0r5wsX

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks