General

  • Target

    JaffaCakes118_9350d86d2640e7caf05a04051c3f3cec

  • Size

    49KB

  • Sample

    250108-je1sgasmej

  • MD5

    9350d86d2640e7caf05a04051c3f3cec

  • SHA1

    4a2c4b668be9172c7f3735fcfd02b85dd01dd191

  • SHA256

    00e4ccae2ee8d3210ad1d2e99c416c2014ed8cadab6fe8ba34cc3eafacd90cc9

  • SHA512

    994c9267047064c8149beaf1e5868b69220e7377af4fcc33e2726b4b30e517160f42148379dc0010e0df92a50c02db35b03204ce1dbeff6d8c96e76ffd16a8f7

  • SSDEEP

    1536:LvQBeOGtrYS3srx93UBWfwC6Ggnouy8g5Uhuz:LhOmTsF93UYfwC6GIoutg5UhK

Malware Config

Targets

    • Target

      JaffaCakes118_9350d86d2640e7caf05a04051c3f3cec

    • Size

      49KB

    • MD5

      9350d86d2640e7caf05a04051c3f3cec

    • SHA1

      4a2c4b668be9172c7f3735fcfd02b85dd01dd191

    • SHA256

      00e4ccae2ee8d3210ad1d2e99c416c2014ed8cadab6fe8ba34cc3eafacd90cc9

    • SHA512

      994c9267047064c8149beaf1e5868b69220e7377af4fcc33e2726b4b30e517160f42148379dc0010e0df92a50c02db35b03204ce1dbeff6d8c96e76ffd16a8f7

    • SSDEEP

      1536:LvQBeOGtrYS3srx93UBWfwC6Ggnouy8g5Uhuz:LhOmTsF93UYfwC6GIoutg5UhK

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks