Overview

overview

10

Static

static

7

ptu621.exe

windows7-x64

10

ptu621.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    05a8480548cf5ddd758f3d83284da00e_JaffaCakes118

  • Size

    4.4MB

  • Sample

    240428-vh3xsacf2y

  • MD5

    05a8480548cf5ddd758f3d83284da00e

  • SHA1

    690c23818a55309f74d4be7361d3c2a595e771ae

  • SHA256

    d63e2c3f4ccd7d0048f50e7fb6bac25bb9bb79e21452e552c83f2d98a4fa46ab

  • SHA512

    12816c22e8008a22220ae3e94090a2860767d5a389d36781f3ec6d89ddc1b127feb92529ec5caac3870deec3f5e01fde225fc0a4d15c4e8bd5a944da57fed656

  • SSDEEP

    98304:M8FwQRUtpc52HCEOoW5VNXvUzygmkHTR5Zk6pvtaw7wT272qkDSQ5s30yKgbJUHB:2jHCEOt1UmJkHTRkwtBYkkMx7UHrV

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      ptu621.exe

    • Size

      5.0MB

    • MD5

      516e4e61cf92a3d6b17ad2c181c2a939

    • SHA1

      3f3f81dea9779a5d9d8478b0386867ccbe17d450

    • SHA256

      3cb1389aa245b496d15d20d25fcefa35f35f85744413205e90caa78f0805902c

    • SHA512

      143e0372ca5ca9c7197d4de69f595fb5b13d517db424331737274b252f16f4cec7490956d08618fcd823f9a9b42e95a7f0439c01a032568722dc864f2b3df71e

    • SSDEEP

      98304:RUxt0mBCcZbMMWl7ZSnSC/Ao4f2uZE+2N3wALB2QviKo8D5yEg9yUPvnoh8dKjn8:uEA7YURz4RZEL3Z2ElcTywrdKj7KNQ

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks