Overview

overview

10

Static

static

1

67fed33603...8.html

windows7-x64

10

67fed33603...8.html

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    67fed33603c944c33232fa331cac549b_JaffaCakes118

  • Size

    347KB

  • Sample

    240522-vqqx7aab41

  • MD5

    67fed33603c944c33232fa331cac549b

  • SHA1

    da6c13bd42f34d4f61793135474ec3741ab9cc47

  • SHA256

    16d25520fe979d0150b9837ad6801058e116a5ad5f1761c9f07ae74b4fd3808d

  • SHA512

    92a97f7dc8a7eefef9c67adc126dbc49d0472878a668d45467426826a134cb001f4da18a4932f1bc502c0ca9563a7a7cf0617ccffa76ed4322e90d3efa8c875e

  • SSDEEP

    6144:gsMYod+X3oI+YMsMYod+X3oI+Y5sMYod+X3oI+YQ:O5d+X3Y5d+X3f5d+X3+

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      67fed33603c944c33232fa331cac549b_JaffaCakes118

    • Size

      347KB

    • MD5

      67fed33603c944c33232fa331cac549b

    • SHA1

      da6c13bd42f34d4f61793135474ec3741ab9cc47

    • SHA256

      16d25520fe979d0150b9837ad6801058e116a5ad5f1761c9f07ae74b4fd3808d

    • SHA512

      92a97f7dc8a7eefef9c67adc126dbc49d0472878a668d45467426826a134cb001f4da18a4932f1bc502c0ca9563a7a7cf0617ccffa76ed4322e90d3efa8c875e

    • SSDEEP

      6144:gsMYod+X3oI+YMsMYod+X3oI+Y5sMYod+X3oI+YQ:O5d+X3Y5d+X3f5d+X3+

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks