Overview

overview

10

Static

static

1

6ec8108bff...8.html

windows7-x64

10

6ec8108bff...8.html

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6ec8108bff770697f0d1b9227e5cd39c_JaffaCakes118

  • Size

    348KB

  • Sample

    240524-rf848sgf4t

  • MD5

    6ec8108bff770697f0d1b9227e5cd39c

  • SHA1

    4ad223a1a50d28a3e430b63c4b7879c17c9cea99

  • SHA256

    2131ce2e9afdc00c1149be6df6b456a121441dacb6ff05d3c3f3d72fbe94dad0

  • SHA512

    c516b1a1b23864543aeb3bf84a1308c82011dcf43e9ebfdfc7c0bbad2bcc8b607dea71471f94b2625ba459761714db65ea38017d7d155324fb56f5b115413fc9

  • SSDEEP

    6144:2sMYod+X3oI+YxzsMYod+X3oI+Y5sMYod+X3oI+YQ:U5d+X3n5d+X3f5d+X3+

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      6ec8108bff770697f0d1b9227e5cd39c_JaffaCakes118

    • Size

      348KB

    • MD5

      6ec8108bff770697f0d1b9227e5cd39c

    • SHA1

      4ad223a1a50d28a3e430b63c4b7879c17c9cea99

    • SHA256

      2131ce2e9afdc00c1149be6df6b456a121441dacb6ff05d3c3f3d72fbe94dad0

    • SHA512

      c516b1a1b23864543aeb3bf84a1308c82011dcf43e9ebfdfc7c0bbad2bcc8b607dea71471f94b2625ba459761714db65ea38017d7d155324fb56f5b115413fc9

    • SSDEEP

      6144:2sMYod+X3oI+YxzsMYod+X3oI+Y5sMYod+X3oI+YQ:U5d+X3n5d+X3f5d+X3+

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks