General

  • Target

    91949679731918d53508dd70be4fe076_JaffaCakes118

  • Size

    1.2MB

  • Sample

    241124-ayq8ps1mcq

  • MD5

    91949679731918d53508dd70be4fe076

  • SHA1

    04c30df40dabb0058f478241af55a775b1962d1d

  • SHA256

    f80ed9c0293e81eec4e5590acc8bad4227d18cd706fc0db5905eee35ccd04dd9

  • SHA512

    2f779200d5eb80a0acdfe5308b19bc23ce5b9cf2f5102640c8d4582ee09230e498cf37834af95f272c05992486285dbe13def786347c7ba62fbdc45a588c65ef

  • SSDEEP

    24576:UfsDyuX5UCS4lny4IysRFbRU2nkms1AGZtxwk:U01Xw4ZFIy6U2dgAotGk

Malware Config

Targets

    • Target

      91949679731918d53508dd70be4fe076_JaffaCakes118

    • Size

      1.2MB

    • MD5

      91949679731918d53508dd70be4fe076

    • SHA1

      04c30df40dabb0058f478241af55a775b1962d1d

    • SHA256

      f80ed9c0293e81eec4e5590acc8bad4227d18cd706fc0db5905eee35ccd04dd9

    • SHA512

      2f779200d5eb80a0acdfe5308b19bc23ce5b9cf2f5102640c8d4582ee09230e498cf37834af95f272c05992486285dbe13def786347c7ba62fbdc45a588c65ef

    • SSDEEP

      24576:UfsDyuX5UCS4lny4IysRFbRU2nkms1AGZtxwk:U01Xw4ZFIy6U2dgAotGk

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

MITRE ATT&CK Enterprise v15

Tasks