Overview

overview

10

Static

static

1

68e0315d1f...8.html

windows7-x64

10

68e0315d1f...8.html

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    68e0315d1f2bb11cbae3e9fe01fc99bd_JaffaCakes118

  • Size

    123KB

  • Sample

    240522-2lq6qabf7z

  • MD5

    68e0315d1f2bb11cbae3e9fe01fc99bd

  • SHA1

    9e2a56d49294a548258bb8ea39265a065a2f6322

  • SHA256

    414df100d303d94e932fe653cb9e92797c0f1741b8e695802f652cb22fb2f79b

  • SHA512

    efc1a8240cda0f19c78f59d1cee3f76b62f6bff0ecf2f0cc4898a95a5b17ed9315fa25a521973ec0dd2c16cfd9f7a717bfde3423e24fddc604d307943e27b497

  • SSDEEP

    3072:HY/YJOyHwA7FuyfkMY+BES09JXAnyrZalI+YQ:zAyHrFLsMYod+X3oI+YQ

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      68e0315d1f2bb11cbae3e9fe01fc99bd_JaffaCakes118

    • Size

      123KB

    • MD5

      68e0315d1f2bb11cbae3e9fe01fc99bd

    • SHA1

      9e2a56d49294a548258bb8ea39265a065a2f6322

    • SHA256

      414df100d303d94e932fe653cb9e92797c0f1741b8e695802f652cb22fb2f79b

    • SHA512

      efc1a8240cda0f19c78f59d1cee3f76b62f6bff0ecf2f0cc4898a95a5b17ed9315fa25a521973ec0dd2c16cfd9f7a717bfde3423e24fddc604d307943e27b497

    • SSDEEP

      3072:HY/YJOyHwA7FuyfkMY+BES09JXAnyrZalI+YQ:zAyHrFLsMYod+X3oI+YQ

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks