Overview

overview

10

Static

static

1

6d4a0565d9...8.html

windows7-x64

10

6d4a0565d9...8.html

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6d4a0565d9beebaae8fad61bfc37e30e_JaffaCakes118

  • Size

    205KB

  • Sample

    240524-epw5tace8z

  • MD5

    6d4a0565d9beebaae8fad61bfc37e30e

  • SHA1

    9bceb0870244bf883902f7f2b36f04292b735d28

  • SHA256

    b9dfda5b1192a8ff12b8a89400509f0048db296b3b1ef894e520e8e209990271

  • SHA512

    2cc205ed6a615901dc20f4a8776bd5bb389d8cee1f87531ced1eef6d17958ff91dd3c57b40f4113038c2613e3c42e848b1cbe662609874399d82bc7beaa01f04

  • SSDEEP

    3072:Sf/zwHVozKyfkMY+BES09JXAnyrZalI+YQ:S301obsMYod+X3oI+YQ

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      6d4a0565d9beebaae8fad61bfc37e30e_JaffaCakes118

    • Size

      205KB

    • MD5

      6d4a0565d9beebaae8fad61bfc37e30e

    • SHA1

      9bceb0870244bf883902f7f2b36f04292b735d28

    • SHA256

      b9dfda5b1192a8ff12b8a89400509f0048db296b3b1ef894e520e8e209990271

    • SHA512

      2cc205ed6a615901dc20f4a8776bd5bb389d8cee1f87531ced1eef6d17958ff91dd3c57b40f4113038c2613e3c42e848b1cbe662609874399d82bc7beaa01f04

    • SSDEEP

      3072:Sf/zwHVozKyfkMY+BES09JXAnyrZalI+YQ:S301obsMYod+X3oI+YQ

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks