Overview

overview

10

Static

static

3

af5957c6a6...18.exe

windows7-x64

10

af5957c6a6...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    af5957c6a6ef1ad4ba5e4813fc0ff440_JaffaCakes118

  • Size

    281KB

  • Sample

    240820-qd23gaxdjl

  • MD5

    af5957c6a6ef1ad4ba5e4813fc0ff440

  • SHA1

    ec54b1ffd2a75ab8ba0adf99cf2bd9899c26a1f7

  • SHA256

    777b484533ed924dc5b74ddf94ab23980936d6e824a5bd4b03c2c693be5de199

  • SHA512

    00a559a2318a549332bc25cf1147dca9b90407b16330396e41088a254b1907ff72f7a4c2d58c347405a2a52f584488cec84d2c37f0e9bb0e2e40400f92353e5f

  • SSDEEP

    3072:mnnAQVG/LytaKItS/fiLKS+f5Aq7iP4l1uCg70yF:KOTeHI8HiL7+f5+4l1tg/

Score
10/10
ramnitbankerdiscoveryspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      af5957c6a6ef1ad4ba5e4813fc0ff440_JaffaCakes118

    • Size

      281KB

    • MD5

      af5957c6a6ef1ad4ba5e4813fc0ff440

    • SHA1

      ec54b1ffd2a75ab8ba0adf99cf2bd9899c26a1f7

    • SHA256

      777b484533ed924dc5b74ddf94ab23980936d6e824a5bd4b03c2c693be5de199

    • SHA512

      00a559a2318a549332bc25cf1147dca9b90407b16330396e41088a254b1907ff72f7a4c2d58c347405a2a52f584488cec84d2c37f0e9bb0e2e40400f92353e5f

    • SSDEEP

      3072:mnnAQVG/LytaKItS/fiLKS+f5Aq7iP4l1uCg70yF:KOTeHI8HiL7+f5+4l1tg/

    Score
    10/10
    ramnitbankerdiscoveryspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks