General

  • Target

    03bd58e83831d9d25b02177e0fcc383e_JaffaCakes118

  • Size

    103KB

  • Sample

    240728-awgw9azhkc

  • MD5

    03bd58e83831d9d25b02177e0fcc383e

  • SHA1

    ba027fc61ab677572d20b028a3d99e0b68763a98

  • SHA256

    50fd2f67f428bccf1370a93aace3afb670c216ef37c39de09e630947902c974b

  • SHA512

    020012df443f96caa3e11819c8b73c866a4d1f7a2a8ca9183db485566f320d684375df2d2d885ab3f62f4da6a215dff72e81d98c2fc5933eeb63abdb639395a6

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND+3T4+C2lmf6g7xifKhLdEH:ymb3NkkiQ3mdBjF+3TU20LifKhLY

Malware Config

Targets

    • Target

      03bd58e83831d9d25b02177e0fcc383e_JaffaCakes118

    • Size

      103KB

    • MD5

      03bd58e83831d9d25b02177e0fcc383e

    • SHA1

      ba027fc61ab677572d20b028a3d99e0b68763a98

    • SHA256

      50fd2f67f428bccf1370a93aace3afb670c216ef37c39de09e630947902c974b

    • SHA512

      020012df443f96caa3e11819c8b73c866a4d1f7a2a8ca9183db485566f320d684375df2d2d885ab3f62f4da6a215dff72e81d98c2fc5933eeb63abdb639395a6

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND+3T4+C2lmf6g7xifKhLdEH:ymb3NkkiQ3mdBjF+3TU20LifKhLY

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks