General

  • Target

    9404d70062e3e25fb6f1201b65cb0404_JaffaCakes118

  • Size

    68KB

  • Sample

    241124-maek8a1lhl

  • MD5

    9404d70062e3e25fb6f1201b65cb0404

  • SHA1

    7a87dde66bde49d296e10d8e2088a898d61e3fa5

  • SHA256

    7f0815208ed42232932fdafccf6ddce999b7e4e669e5f206144f2dd7b369f3ec

  • SHA512

    f0befac56464d4d4f6ad9c6a27f2441689cc8ae435faffd88e558eefa8159cab9249038d3552c26bb6f2a58c013fb95bf9c045d45cd73d4a5f724036612fe9a8

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIkpi+qmPz:ymb3NkkiQ3mdBjFIj+qmr

Malware Config

Targets

    • Target

      9404d70062e3e25fb6f1201b65cb0404_JaffaCakes118

    • Size

      68KB

    • MD5

      9404d70062e3e25fb6f1201b65cb0404

    • SHA1

      7a87dde66bde49d296e10d8e2088a898d61e3fa5

    • SHA256

      7f0815208ed42232932fdafccf6ddce999b7e4e669e5f206144f2dd7b369f3ec

    • SHA512

      f0befac56464d4d4f6ad9c6a27f2441689cc8ae435faffd88e558eefa8159cab9249038d3552c26bb6f2a58c013fb95bf9c045d45cd73d4a5f724036612fe9a8

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIkpi+qmPz:ymb3NkkiQ3mdBjFIj+qmr

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks