Overview

overview

10

Static

static

3

0f61ca8106...18.dll

windows7-x64

10

0f61ca8106...18.dll

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0f61ca8106f401101ef017bd831372f8_JaffaCakes118

  • Size

    292KB

  • Sample

    240625-y16yyazhnf

  • MD5

    0f61ca8106f401101ef017bd831372f8

  • SHA1

    4bed4d81cb96041910ce33964df18b8b28779e08

  • SHA256

    5df350657eedcff52b60a9aa497fa19cffefe140b54ba9b23fa299111fdbf1fe

  • SHA512

    efccf0e5821cded5f9c9adea1692f0196204e6eacf57fd4425cf966a7a73e6ac6e94ac8d05003132331edaa331371c96bf0c387e4932a9624fc8c7889b12a8b9

  • SSDEEP

    6144:V0D3yTjQbErlrUJV6RhxNQBDOi5uHStL6XZW8b:GD3Kj5rlaIRqwHStLEIW

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      0f61ca8106f401101ef017bd831372f8_JaffaCakes118

    • Size

      292KB

    • MD5

      0f61ca8106f401101ef017bd831372f8

    • SHA1

      4bed4d81cb96041910ce33964df18b8b28779e08

    • SHA256

      5df350657eedcff52b60a9aa497fa19cffefe140b54ba9b23fa299111fdbf1fe

    • SHA512

      efccf0e5821cded5f9c9adea1692f0196204e6eacf57fd4425cf966a7a73e6ac6e94ac8d05003132331edaa331371c96bf0c387e4932a9624fc8c7889b12a8b9

    • SSDEEP

      6144:V0D3yTjQbErlrUJV6RhxNQBDOi5uHStL6XZW8b:GD3Kj5rlaIRqwHStLEIW

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks