General

  • Target

    95a84f35123fbc4bf54820868d70629d_JaffaCakes118

  • Size

    478KB

  • Sample

    241124-s68f3aspen

  • MD5

    95a84f35123fbc4bf54820868d70629d

  • SHA1

    b9651fa1f14f3023b8d35628d7b3642ad3e4c8bc

  • SHA256

    d6bdf3c7641dd0d1f55ea5b30d76981a4e46aeeefa21b849ced974d8316bb644

  • SHA512

    99777c7b335f77051bba095107129b01cea0b14a2fcac56216b8f50cb614934ca8fd6aaf1abc0c9451be4e6177361b5802292d0586d605ba24eec2244e8a527b

  • SSDEEP

    6144:n3C9BRo7MlrWKo+lS0Le4xRSAoq78yoyfx93svqTP+E4QJWs:n3C9yMo+S0L9xRnoq7H9QYJxWs

Malware Config

Targets

    • Target

      95a84f35123fbc4bf54820868d70629d_JaffaCakes118

    • Size

      478KB

    • MD5

      95a84f35123fbc4bf54820868d70629d

    • SHA1

      b9651fa1f14f3023b8d35628d7b3642ad3e4c8bc

    • SHA256

      d6bdf3c7641dd0d1f55ea5b30d76981a4e46aeeefa21b849ced974d8316bb644

    • SHA512

      99777c7b335f77051bba095107129b01cea0b14a2fcac56216b8f50cb614934ca8fd6aaf1abc0c9451be4e6177361b5802292d0586d605ba24eec2244e8a527b

    • SSDEEP

      6144:n3C9BRo7MlrWKo+lS0Le4xRSAoq78yoyfx93svqTP+E4QJWs:n3C9yMo+S0L9xRnoq7H9QYJxWs

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks