Overview

overview

10

Static

static

7

jxszdjp.exe

windows7-x64

10

jxszdjp.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    jxszdjp.exe

  • Size

    1023KB

  • Sample

    230630-p2j15ade9t

  • MD5

    5f6a5e59586760420c29a82336845e25

  • SHA1

    9c078d849c2505576d98cf9e8b0e30c777e06bc7

  • SHA256

    87c160843bc0bdcd754a151c288f899763494385830016c299245f1fe9354b54

  • SHA512

    bb77c4a584eeae46a8e64f9c0e1a6d749ad869e6ca0951ac030ff85ec4239a985f8fd9307af29c2e15e6a16e1227bd55696d78fa9b424fcb0cfd337e5f4bf1da

  • SSDEEP

    24576:p9i31nCX+v7ucalwTGn+bgzb/KmdpNY0R:p9i31jv7ucaCTGuYJdpNY0R

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      jxszdjp.exe

    • Size

      1023KB

    • MD5

      5f6a5e59586760420c29a82336845e25

    • SHA1

      9c078d849c2505576d98cf9e8b0e30c777e06bc7

    • SHA256

      87c160843bc0bdcd754a151c288f899763494385830016c299245f1fe9354b54

    • SHA512

      bb77c4a584eeae46a8e64f9c0e1a6d749ad869e6ca0951ac030ff85ec4239a985f8fd9307af29c2e15e6a16e1227bd55696d78fa9b424fcb0cfd337e5f4bf1da

    • SSDEEP

      24576:p9i31nCX+v7ucalwTGn+bgzb/KmdpNY0R:p9i31jv7ucaCTGuYJdpNY0R

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks