Overview

overview

10

Static

static

1

6ebf168aa1...8.html

windows7-x64

10

6ebf168aa1...8.html

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6ebf168aa12f9a81d5edfb5c0f023455_JaffaCakes118

  • Size

    673KB

  • Sample

    240524-q9b6xsge66

  • MD5

    6ebf168aa12f9a81d5edfb5c0f023455

  • SHA1

    bb4b4e5fda85fd1350501c11aaa91cbac8f866d7

  • SHA256

    e396953b02da23d8a77d2427f5a9a4992fa8872cd5f19ca6a6dfda36be6e71c7

  • SHA512

    5724b943c48d7d29b486b59a7497ddc33c8f9d0bf0459a9c0e65fa25b5cd34ede4ef388a60a1d18e9e91e51b8a743dc3704a3b7749eadaac57ee022dc9e78cb4

  • SSDEEP

    12288:25d+X3p5d+X3P5d+X3I5d+X395d+X3f5d+X3+:0+F+f+C+h+P+e

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      6ebf168aa12f9a81d5edfb5c0f023455_JaffaCakes118

    • Size

      673KB

    • MD5

      6ebf168aa12f9a81d5edfb5c0f023455

    • SHA1

      bb4b4e5fda85fd1350501c11aaa91cbac8f866d7

    • SHA256

      e396953b02da23d8a77d2427f5a9a4992fa8872cd5f19ca6a6dfda36be6e71c7

    • SHA512

      5724b943c48d7d29b486b59a7497ddc33c8f9d0bf0459a9c0e65fa25b5cd34ede4ef388a60a1d18e9e91e51b8a743dc3704a3b7749eadaac57ee022dc9e78cb4

    • SSDEEP

      12288:25d+X3p5d+X3P5d+X3I5d+X395d+X3f5d+X3+:0+F+f+C+h+P+e

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks