Overview

overview

10

Static

static

1

74fac14bf7...8.html

windows7-x64

10

74fac14bf7...8.html

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    74fac14bf777d50d5d9189aaa5762c75_JaffaCakes118

  • Size

    138KB

  • Sample

    240526-k3wn4adc3t

  • MD5

    74fac14bf777d50d5d9189aaa5762c75

  • SHA1

    fa7b62b0b0fcac6bcda17981eb2c9c9e88a40884

  • SHA256

    94d14bdd0432046600f2713cacac77a4fd310bd8e8831ecb1616c40ed3974ded

  • SHA512

    6e91301b9d870928b23cb824f5ea94bac5d2b01a8630fbf3c89c49e63a447ba096b3f47b53d329a2f3d3f37ac1b4165fb1cc667b70b614ca75e359b56a07c5f7

  • SSDEEP

    3072:SR5musZxF+m7jKyfkMY+BES09JXAnyrZalI+YQ:SDavsMYod+X3oI+YQ

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      74fac14bf777d50d5d9189aaa5762c75_JaffaCakes118

    • Size

      138KB

    • MD5

      74fac14bf777d50d5d9189aaa5762c75

    • SHA1

      fa7b62b0b0fcac6bcda17981eb2c9c9e88a40884

    • SHA256

      94d14bdd0432046600f2713cacac77a4fd310bd8e8831ecb1616c40ed3974ded

    • SHA512

      6e91301b9d870928b23cb824f5ea94bac5d2b01a8630fbf3c89c49e63a447ba096b3f47b53d329a2f3d3f37ac1b4165fb1cc667b70b614ca75e359b56a07c5f7

    • SSDEEP

      3072:SR5musZxF+m7jKyfkMY+BES09JXAnyrZalI+YQ:SDavsMYod+X3oI+YQ

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks