Overview

overview

10

Static

static

1

73e5202f46...8.html

windows7-x64

10

73e5202f46...8.html

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    73e5202f4699fecb2d4316f3df4a090d_JaffaCakes118

  • Size

    348KB

  • Sample

    240526-brhteshf8t

  • MD5

    73e5202f4699fecb2d4316f3df4a090d

  • SHA1

    7f3d639758ee46d1edbb41c1a18770185315623e

  • SHA256

    f37687c08d6cd709cf8ed549aa28df08791d105566b7a9efbb1fde0b27d729d8

  • SHA512

    19f99f47354e369b6f7e05d2e3a4f84b2bdba574d3a7777fd530cb28e32e40694991207c0e95e6ac526bc3d9454c99be7ed21438f38d8ec36688ab64124a77e2

  • SSDEEP

    6144:tsMYod+X3oI+YBdsMYod+X3oI+Y5sMYod+X3oI+YQ:55d+X3np5d+X3f5d+X3+

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      73e5202f4699fecb2d4316f3df4a090d_JaffaCakes118

    • Size

      348KB

    • MD5

      73e5202f4699fecb2d4316f3df4a090d

    • SHA1

      7f3d639758ee46d1edbb41c1a18770185315623e

    • SHA256

      f37687c08d6cd709cf8ed549aa28df08791d105566b7a9efbb1fde0b27d729d8

    • SHA512

      19f99f47354e369b6f7e05d2e3a4f84b2bdba574d3a7777fd530cb28e32e40694991207c0e95e6ac526bc3d9454c99be7ed21438f38d8ec36688ab64124a77e2

    • SSDEEP

      6144:tsMYod+X3oI+YBdsMYod+X3oI+Y5sMYod+X3oI+YQ:55d+X3np5d+X3f5d+X3+

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks