Overview

overview

10

Static

static

3

20ccf7b3a9...18.exe

windows7-x64

10

20ccf7b3a9...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    20ccf7b3a99bde45effc51c2272d8433_JaffaCakes118

  • Size

    1.2MB

  • Sample

    240703-c44gbsxemj

  • MD5

    20ccf7b3a99bde45effc51c2272d8433

  • SHA1

    903377bcee0b2ba472c5dcfc3154d4be4ba7f305

  • SHA256

    9087a33f9952ad59e429812c512d2aa8dea8031444dd2d37bd84e72d51d9140e

  • SHA512

    ae767ae9eac4a25860855fd31f520bc16b3807e7ebcd6e504ee838f4b98d40981ac139737264188ebd5bfd86caed0cfbf596c938e2db936999bd5d21aa4587c4

  • SSDEEP

    24576:KgFPJDtrKl5MCLj9ozcI62pr+4Ntd77h:KKPJcl5Yu2pjXd77

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      20ccf7b3a99bde45effc51c2272d8433_JaffaCakes118

    • Size

      1.2MB

    • MD5

      20ccf7b3a99bde45effc51c2272d8433

    • SHA1

      903377bcee0b2ba472c5dcfc3154d4be4ba7f305

    • SHA256

      9087a33f9952ad59e429812c512d2aa8dea8031444dd2d37bd84e72d51d9140e

    • SHA512

      ae767ae9eac4a25860855fd31f520bc16b3807e7ebcd6e504ee838f4b98d40981ac139737264188ebd5bfd86caed0cfbf596c938e2db936999bd5d21aa4587c4

    • SSDEEP

      24576:KgFPJDtrKl5MCLj9ozcI62pr+4Ntd77h:KKPJcl5Yu2pjXd77

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks