Overview

overview

10

Static

static

1

007041eaa8...8.html

windows7-x64

10

007041eaa8...8.html

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    007041eaa8e2275ffc6a60d623bd361d_JaffaCakes118

  • Size

    159KB

  • Sample

    240426-k3j1asdc37

  • MD5

    007041eaa8e2275ffc6a60d623bd361d

  • SHA1

    8eec98b0a72091753c9dbd6f72405908f026da75

  • SHA256

    22b0143fce9e963aeb80631fd75bff8c4fce44af98e680dd671a7042ea02804a

  • SHA512

    476f9efb69f29251428bd414aa96a061bbeed28a505f2a7e404879db36280d34f4c6c82b4bb11d929eba8d3b4eaa94200064e2619f66af630eddec929a05ecf1

  • SSDEEP

    3072:iBSrifK8OG7FyfkMY+BES09JXAnyrZalI+YQ:i0qKWwsMYod+X3oI+YQ

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      007041eaa8e2275ffc6a60d623bd361d_JaffaCakes118

    • Size

      159KB

    • MD5

      007041eaa8e2275ffc6a60d623bd361d

    • SHA1

      8eec98b0a72091753c9dbd6f72405908f026da75

    • SHA256

      22b0143fce9e963aeb80631fd75bff8c4fce44af98e680dd671a7042ea02804a

    • SHA512

      476f9efb69f29251428bd414aa96a061bbeed28a505f2a7e404879db36280d34f4c6c82b4bb11d929eba8d3b4eaa94200064e2619f66af630eddec929a05ecf1

    • SSDEEP

      3072:iBSrifK8OG7FyfkMY+BES09JXAnyrZalI+YQ:i0qKWwsMYod+X3oI+YQ

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks