General

  • Target

    003a23789e477b05850dee39d5262c89_JaffaCakes118

  • Size

    14KB

  • Sample

    240930-jlyxfsyakb

  • MD5

    003a23789e477b05850dee39d5262c89

  • SHA1

    df3c0aeccff48a74f0ce357efd3cae8c1790a587

  • SHA256

    d7cae41cd1817dc3537ea2b2e6518c7ace48a18380c3b17a08c0dae564577f1d

  • SHA512

    f60d4dac022a7251f11dec0768bd2c4804f27d1bcab7cb5341a1bb8ecbe2eba08104b2d40e46543c578562f9316f1b5c9fad84e1e87d99f45c891602d4ce6058

  • SSDEEP

    384:pqufoa2vDxru5KyxdCTCIrcHzWoSz9mSbef0an:Ka2Vru5dCnrcqbGfzn

Malware Config

Targets

    • Target

      003a23789e477b05850dee39d5262c89_JaffaCakes118

    • Size

      14KB

    • MD5

      003a23789e477b05850dee39d5262c89

    • SHA1

      df3c0aeccff48a74f0ce357efd3cae8c1790a587

    • SHA256

      d7cae41cd1817dc3537ea2b2e6518c7ace48a18380c3b17a08c0dae564577f1d

    • SHA512

      f60d4dac022a7251f11dec0768bd2c4804f27d1bcab7cb5341a1bb8ecbe2eba08104b2d40e46543c578562f9316f1b5c9fad84e1e87d99f45c891602d4ce6058

    • SSDEEP

      384:pqufoa2vDxru5KyxdCTCIrcHzWoSz9mSbef0an:Ka2Vru5dCnrcqbGfzn

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Blocklisted process makes network request

MITRE ATT&CK Enterprise v15

Tasks