osiris | 385f0a0ccaec6272c8270f0d5228f2641cca916e84825ebb35dbebb036fa2165 | Triage

Submit
Reports

Overview

overview

Static

static

3

7e77bb853d...18.exe

windows7-x64

7e77bb853d...18.exe

windows10-2004-x64

Sharing

General

Target

7e77bb853d227e06b635e6eb3e0b31f0_JaffaCakes118
Size

843KB
Sample

240801-adkv7a1app
MD5

7e77bb853d227e06b635e6eb3e0b31f0
SHA1

638759be4cbb014f56f143d111535e900224e4cb
SHA256

385f0a0ccaec6272c8270f0d5228f2641cca916e84825ebb35dbebb036fa2165
SHA512

83a78c0c76f5b49ae7962fe99f9332c92d3b424c3aa9f658d4cf61af68aa42151bdfca3c0e452fdfc579794d2a9b86f1316e8c3f6c34c98c31d43bf1a922113e
SSDEEP

24576:y7hRoFHVEIUHWeRCEKgTOvU5/AX1N6Qth4ct1n:i1Id2KrvU4mcbn

Score

10^/10

osiris banker botnet discovery

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

7e77bb853d227e06b635e6eb3e0b31f0_JaffaCakes118.exe

Resource

win7-20240708-en

osiris banker botnet discovery

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

7e77bb853d227e06b635e6eb3e0b31f0_JaffaCakes118.exe

Resource

win10v2004-20240730-en

osiris banker botnet discovery

windows10-2004-x64

11 signatures

150 seconds

Malware Config

Targets

- Target
  
  7e77bb853d227e06b635e6eb3e0b31f0_JaffaCakes118
- Size
  
  843KB
- MD5
  
  7e77bb853d227e06b635e6eb3e0b31f0
- SHA1
  
  638759be4cbb014f56f143d111535e900224e4cb
- SHA256
  
  385f0a0ccaec6272c8270f0d5228f2641cca916e84825ebb35dbebb036fa2165
- SHA512
  
  83a78c0c76f5b49ae7962fe99f9332c92d3b424c3aa9f658d4cf61af68aa42151bdfca3c0e452fdfc579794d2a9b86f1316e8c3f6c34c98c31d43bf1a922113e
- SSDEEP
  
  24576:y7hRoFHVEIUHWeRCEKgTOvU5/AX1N6Qth4ct1n:i1Id2KrvU4mcbn
Score

10^/10

osiris banker botnet discovery
- Osiris
  banker botnet osiris
- Executes dropped EXE
- Loads dropped DLL
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
- Uses Tor communications
  Malware can proxy its traffic through Tor for more anonymity.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Proxy

Exfiltration

Impact

Tasks

static1

behavioral1

osirisbankerbotnetdiscovery

behavioral2

osirisbankerbotnetdiscovery

© 2018-2025

Terms | Privacy