Overview

overview

10

Static

static

3

0541ce3a59...18.exe

windows7-x64

10

0541ce3a59...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0541ce3a59d1d1c47d805961890d3a91_JaffaCakes118

  • Size

    465KB

  • Sample

    240728-b8v53s1ejl

  • MD5

    0541ce3a59d1d1c47d805961890d3a91

  • SHA1

    10a2149b4274fba729db256c6c64a20ca169b701

  • SHA256

    58e47edaad80ce2561635e8d5a91470efb906813702ca86b248945ace23aced1

  • SHA512

    ddcb16afdece3aa345ed7a6515b6bc17978e5363e3f9219ee653ce97bab37408899704dc8f929f4a84154c6d4a5a13eff7829f06933b080f527da8615b6b1005

  • SSDEEP

    6144:Pcm7ImGddXtWrXD486jJq1BStv4Ib1HsYigTvo+9:d7Tc9Wj16A3Stvxpig7oM

Score
10/10
blackmoonbankerdiscoverytrojanupx

Malware Config

Targets

    • Target

      0541ce3a59d1d1c47d805961890d3a91_JaffaCakes118

    • Size

      465KB

    • MD5

      0541ce3a59d1d1c47d805961890d3a91

    • SHA1

      10a2149b4274fba729db256c6c64a20ca169b701

    • SHA256

      58e47edaad80ce2561635e8d5a91470efb906813702ca86b248945ace23aced1

    • SHA512

      ddcb16afdece3aa345ed7a6515b6bc17978e5363e3f9219ee653ce97bab37408899704dc8f929f4a84154c6d4a5a13eff7829f06933b080f527da8615b6b1005

    • SSDEEP

      6144:Pcm7ImGddXtWrXD486jJq1BStv4Ib1HsYigTvo+9:d7Tc9Wj16A3Stvxpig7oM

    Score
    10/10
    blackmoonbankertrojanupxdiscovery

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks