General

  • Target

    bef1c293858b7e2f3b81c931a77187c7_JaffaCakes118

  • Size

    200KB

  • Sample

    240824-tek25azbmp

  • MD5

    bef1c293858b7e2f3b81c931a77187c7

  • SHA1

    2a35118639bd9a59d8673ba15b0b98fd6934d172

  • SHA256

    0a11ef7393dc941ec57b3d838aff5f3c9ecad644ca4907e38cd0ed06faaf744d

  • SHA512

    48a6280e4fddc9d0073b40985c0e2c8c65a74b0a2146eacbb3fb857181bb8871e14ff365886faf7ad7937f211f5a230d9aa3cec6ddd05090ae5ffbd978037cd4

  • SSDEEP

    1536:PvQBeOGtrYSSsrc93UBIfdC67m6AJiqyvU2r1vsKM4ltyjS:PhOm2sI93UufdC67cihvH1S/m

Malware Config

Targets

    • Target

      bef1c293858b7e2f3b81c931a77187c7_JaffaCakes118

    • Size

      200KB

    • MD5

      bef1c293858b7e2f3b81c931a77187c7

    • SHA1

      2a35118639bd9a59d8673ba15b0b98fd6934d172

    • SHA256

      0a11ef7393dc941ec57b3d838aff5f3c9ecad644ca4907e38cd0ed06faaf744d

    • SHA512

      48a6280e4fddc9d0073b40985c0e2c8c65a74b0a2146eacbb3fb857181bb8871e14ff365886faf7ad7937f211f5a230d9aa3cec6ddd05090ae5ffbd978037cd4

    • SSDEEP

      1536:PvQBeOGtrYSSsrc93UBIfdC67m6AJiqyvU2r1vsKM4ltyjS:PhOm2sI93UufdC67cihvH1S/m

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks