Overview

overview

10

Static

static

1

04a921b0e9...8.html

windows7-x64

10

04a921b0e9...8.html

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    04a921b0e9431ddaf074b734851ec27b_JaffaCakes118

  • Size

    347KB

  • Sample

    240428-h6cz2sag52

  • MD5

    04a921b0e9431ddaf074b734851ec27b

  • SHA1

    f260447673af48f9890ba51e3702023bbc5025c4

  • SHA256

    1c07a9434455e7bd118513f790c6bb6d7893433cbea620ff3823ddbd958297b9

  • SHA512

    abb6b0746703147ba39a55287f532ccdf818c0aa59c525ef25d09d5066744eb651473f60a697bfa0cba9d5204a438a6a75780d5fe242d81f5270813593fba7f2

  • SSDEEP

    6144:wsMYod+X3oI+YQYsMYod+X3oI+Y5sMYod+X3oI+YQ:e5d+X3p5d+X3f5d+X3+

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      04a921b0e9431ddaf074b734851ec27b_JaffaCakes118

    • Size

      347KB

    • MD5

      04a921b0e9431ddaf074b734851ec27b

    • SHA1

      f260447673af48f9890ba51e3702023bbc5025c4

    • SHA256

      1c07a9434455e7bd118513f790c6bb6d7893433cbea620ff3823ddbd958297b9

    • SHA512

      abb6b0746703147ba39a55287f532ccdf818c0aa59c525ef25d09d5066744eb651473f60a697bfa0cba9d5204a438a6a75780d5fe242d81f5270813593fba7f2

    • SSDEEP

      6144:wsMYod+X3oI+YQYsMYod+X3oI+Y5sMYod+X3oI+YQ:e5d+X3p5d+X3f5d+X3+

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks