General

  • Target

    99eb3b57b1cd3d89db38dbda63415c5d_JaffaCakes118

  • Size

    103KB

  • Sample

    241125-hrwhvavjhx

  • MD5

    99eb3b57b1cd3d89db38dbda63415c5d

  • SHA1

    3cb31c68181b73c2220888146607b1080bf710f0

  • SHA256

    69a683e58f1a7d94b5d1d0b3c9288426924cc20661304cd54fd5fe18bc3114c9

  • SHA512

    07c2f1ad4203a70cc5782c9229822a3c0a6b39a73d53a92beb606915073c3d2a88d680c2e164ad4262b279e851ee996614da6b84ff40ded23ecb183dd5eaaa05

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFo73tvn+Yp99zm+/KZBHq82Uo:n3C9BRo7tvnJ99T/KZE8k

Malware Config

Targets

    • Target

      99eb3b57b1cd3d89db38dbda63415c5d_JaffaCakes118

    • Size

      103KB

    • MD5

      99eb3b57b1cd3d89db38dbda63415c5d

    • SHA1

      3cb31c68181b73c2220888146607b1080bf710f0

    • SHA256

      69a683e58f1a7d94b5d1d0b3c9288426924cc20661304cd54fd5fe18bc3114c9

    • SHA512

      07c2f1ad4203a70cc5782c9229822a3c0a6b39a73d53a92beb606915073c3d2a88d680c2e164ad4262b279e851ee996614da6b84ff40ded23ecb183dd5eaaa05

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFo73tvn+Yp99zm+/KZBHq82Uo:n3C9BRo7tvnJ99T/KZE8k

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks