Overview

overview

10

Static

static

10

37278f8113...18.rar

windows7-x64

1

37278f8113...18.rar

windows10-2004-x64

1

DuoWei.dll

windows7-x64

10

DuoWei.dll

windows10-2004-x64

5

Providence.exe

windows7-x64

10

Providence.exe

windows10-2004-x64

10

idix.dll

windows7-x64

3

idix.dll

windows10-2004-x64

3

请先下�....0.url

windows7-x64

1

请先下�....0.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    37278f8113745774640f5b647de0bf7a_JaffaCakes118

  • Size

    130KB

  • Sample

    241011-2jtttsxgld

  • MD5

    37278f8113745774640f5b647de0bf7a

  • SHA1

    ec633bb28de73082fc3c08cdca464da47e874471

  • SHA256

    e5bb20f9f11465cc01d24f5a9c27d4643af924e8b2a03b0d5e109aa15968944b

  • SHA512

    52b2c6f6f2dbfa03c94ff9bb5a2c6ee27341e2f4832540feeff27a0248bae2b5b8cd34dece30c34cc30b53bab9f6d9d44d50081087a10f9f856622781e710ba9

  • SSDEEP

    3072:5upCvIDP3BuE84SO5fmDzpHknxq8swJC8PXtCmJrFUU:oMSGFcoHUxq8jJC8YmUU

Score
10/10
blackmoonrevengeratbankerdiscoverystealertrojanupx

Malware Config

Targets

    • Target

      37278f8113745774640f5b647de0bf7a_JaffaCakes118

    • Size

      130KB

    • MD5

      37278f8113745774640f5b647de0bf7a

    • SHA1

      ec633bb28de73082fc3c08cdca464da47e874471

    • SHA256

      e5bb20f9f11465cc01d24f5a9c27d4643af924e8b2a03b0d5e109aa15968944b

    • SHA512

      52b2c6f6f2dbfa03c94ff9bb5a2c6ee27341e2f4832540feeff27a0248bae2b5b8cd34dece30c34cc30b53bab9f6d9d44d50081087a10f9f856622781e710ba9

    • SSDEEP

      3072:5upCvIDP3BuE84SO5fmDzpHknxq8swJC8PXtCmJrFUU:oMSGFcoHUxq8jJC8YmUU

    Score
    1/10
    behavioral1behavioral2

    • Target

      DuoWei.dll

    • Size

      47KB

    • MD5

      60339b2958dfbbb4e7de176774a42686

    • SHA1

      d1c3ebad814edbc7f2ef59c94568a3c55b1afc71

    • SHA256

      46fcbe2aad5dd0e99c7c3a5129f790ba524a2091cc144964fa0ad080854f0982

    • SHA512

      6896599d433afd19d42414198b577297d8ea6d6c83748d19b380d2462b2b2259d8129b5da27d374a56591791a2ccd9187e28b6742d6ad996dfd1d047d0a0f010

    • SSDEEP

      768:W+gOMd5t6J0ngu4sNT8dEuYD5mXc8kd1cdgaCkctUkijIZVHlG:rLM9Q0g2NT8Fbk3cdgUcmkij+FG

    Score
    10/10
    blackmoonbankerdiscoverytrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral3behavioral4

    • Target

      Providence.exe

    • Size

      142KB

    • MD5

      7bd2b37e9639b54aa0648de2719d962b

    • SHA1

      b3375ccbf620c16eddf8c9e580abf3e957cf164f

    • SHA256

      b224faf3b809d73081b04bcfd75e3abf35ca305a00a6a210de316793887e3b66

    • SHA512

      95a385a1f71c482325f7812e89acd407a45cc2228a8ae32bf811276eb9aae71df8d3836c0428d027db7e4d408511fe7174229fcd3db6d45e39df3b02bdb4bfcc

    • SSDEEP

      1536:4qbJDBpABpyh0m0GDQhRhnh0R5Q/yRvihL1NC6kvlYqnYZV/3qh+dBp:fJXWyh0m0GDD5Q/yHvqqnYZV/3qh+5

    Score
    10/10
    blackmoonbankerdiscoverytrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral5behavioral6

    • Target

      idix.dll

    • Size

      87KB

    • MD5

      ac147ebbabaec4b9262df61984728d27

    • SHA1

      dfb93606bf1a0595bc5d2bcdac4fd2e1ac93aa33

    • SHA256

      5389e114977175693b51ae5e1581a2e7ef0574f6335e7585de3cbf49cbb3e037

    • SHA512

      0ce6edb9f4c051af9150376f4f827ba0282e8c398cc18c6cb0b08b71d23803df30bd0df7681800b54fd67660a165200b009103485d523fd00209ae816bf61d55

    • SSDEEP

      1536:FM5TuEZuOXDTRFI1HLFW0knPUk8MpyrpsFMKY7wtvoTrJmccX:FM5TDkE7WrFzYGhsF+7soTrJmcE

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      请先下载安装.NETFramework4.0.url

    • Size

      125B

    • MD5

      374406dd2ba710a5613d808b2a46c993

    • SHA1

      658f6b5949a2de3637ace14e992980c709b93e30

    • SHA256

      9fca81d1e0a27734e63cfcd7450b1a44a60aad6def776737977e5bc6a84bb709

    • SHA512

      6cc550319f0e2abbdd644e0a2d44c222e8a585de8f00755faface3f1dcf3a9aa02e3b552d4d63fc0f6bc94d79b02170fbffd7efab7f447547953cbb8075e9b82

    Score
    1/10
    behavioral10behavioral9

MITRE ATT&CK Enterprise v15

Tasks