General

  • Target

    076b980cd8d1248820d680b4b53dc629_JaffaCakes118

  • Size

    172KB

  • Sample

    241001-zxcrcszhmr

  • MD5

    076b980cd8d1248820d680b4b53dc629

  • SHA1

    8b9ff570e0fe56434be15a6923608a5e68607683

  • SHA256

    7830b9188d4076b6afe4d45db09b1621d461824c910ba090b421c178a78fa3e8

  • SHA512

    a91d75e543a230beba15b3d25967e3e5f3598fcf6bf2c8748a265d2893e8dbc7313479c31497e939f7cd133a9ad6a6473c8b2ced3f057ef5d294b7d2d189b092

  • SSDEEP

    3072:khOmTsF93UYfwC6GIoutpYcvrqrE66kropO6BWlPFH4t6NDWOH148BqCFf:kcm4FmowdHoSphraHcpOFltH4ttj8BN

Malware Config

Targets

    • Target

      076b980cd8d1248820d680b4b53dc629_JaffaCakes118

    • Size

      172KB

    • MD5

      076b980cd8d1248820d680b4b53dc629

    • SHA1

      8b9ff570e0fe56434be15a6923608a5e68607683

    • SHA256

      7830b9188d4076b6afe4d45db09b1621d461824c910ba090b421c178a78fa3e8

    • SHA512

      a91d75e543a230beba15b3d25967e3e5f3598fcf6bf2c8748a265d2893e8dbc7313479c31497e939f7cd133a9ad6a6473c8b2ced3f057ef5d294b7d2d189b092

    • SSDEEP

      3072:khOmTsF93UYfwC6GIoutpYcvrqrE66kropO6BWlPFH4t6NDWOH148BqCFf:kcm4FmowdHoSphraHcpOFltH4ttj8BN

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks