Overview

overview

10

Static

static

3

fa27b422c5...18.exe

windows7-x64

10

fa27b422c5...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fa27b422c56bbe9a8b8b3b4ba2f7e63c_JaffaCakes118

  • Size

    107KB

  • Sample

    240419-m4a5wsag4t

  • MD5

    fa27b422c56bbe9a8b8b3b4ba2f7e63c

  • SHA1

    dcaed05625065353a56a518eb7f0aa739225c86d

  • SHA256

    f0b3fe4ef25b624325488adde582c5327aef98d9a6ec14e21e91b58acdc3f1c2

  • SHA512

    baf54ef1f4667e8cabdff2d6690088bca0ae12b8e7ec2fbb7a59ed55487b4c92d642d38457583818b67be213717acfbcc37b7b8debe779dad6a19dfad94ddcd6

  • SSDEEP

    1536:q+FDoKXniY1u7Nn2JFkC2styJjCKICFjC7EWisS+5mlatSfkZK:q+FDhK71QkbstyJjCKICpC72s/mlaXK

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      fa27b422c56bbe9a8b8b3b4ba2f7e63c_JaffaCakes118

    • Size

      107KB

    • MD5

      fa27b422c56bbe9a8b8b3b4ba2f7e63c

    • SHA1

      dcaed05625065353a56a518eb7f0aa739225c86d

    • SHA256

      f0b3fe4ef25b624325488adde582c5327aef98d9a6ec14e21e91b58acdc3f1c2

    • SHA512

      baf54ef1f4667e8cabdff2d6690088bca0ae12b8e7ec2fbb7a59ed55487b4c92d642d38457583818b67be213717acfbcc37b7b8debe779dad6a19dfad94ddcd6

    • SSDEEP

      1536:q+FDoKXniY1u7Nn2JFkC2styJjCKICFjC7EWisS+5mlatSfkZK:q+FDhK71QkbstyJjCKICpC72s/mlaXK

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks