General

  • Target

    42b670b3914f7cc89bdd195bf92e2f13_JaffaCakes118

  • Size

    461KB

  • Sample

    241014-rx9r4azdlh

  • MD5

    42b670b3914f7cc89bdd195bf92e2f13

  • SHA1

    7908675f7ea136ad521a7ae012a7ffb7a7406128

  • SHA256

    67950e1f4d336bd0cf32d4225b5067f2a8d1baeac12be557d29fb12c9d85877d

  • SHA512

    e7f3884dd0f9dbaeb416f9b17543f6fc5d6632309786c66e5f164698519bb553653bfb7331f379153b7ba841a2d6330bbf863a037f7349bd48dccde643413b1d

  • SSDEEP

    6144:n3C9BRo7MlrWKo+lS0Le4xRSAoq78yoyfx93svqTNAuViDC:n3C9yMo+S0L9xRnoq7H9QYNAuVF

Malware Config

Targets

    • Target

      42b670b3914f7cc89bdd195bf92e2f13_JaffaCakes118

    • Size

      461KB

    • MD5

      42b670b3914f7cc89bdd195bf92e2f13

    • SHA1

      7908675f7ea136ad521a7ae012a7ffb7a7406128

    • SHA256

      67950e1f4d336bd0cf32d4225b5067f2a8d1baeac12be557d29fb12c9d85877d

    • SHA512

      e7f3884dd0f9dbaeb416f9b17543f6fc5d6632309786c66e5f164698519bb553653bfb7331f379153b7ba841a2d6330bbf863a037f7349bd48dccde643413b1d

    • SSDEEP

      6144:n3C9BRo7MlrWKo+lS0Le4xRSAoq78yoyfx93svqTNAuViDC:n3C9yMo+S0L9xRnoq7H9QYNAuVF

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks