Overview

overview

10

Static

static

1

d1ecdca443...8.html

windows7-x64

10

d1ecdca443...8.html

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    d1ecdca443b90db25d03a49064dfff5d_JaffaCakes118

  • Size

    156KB

  • Sample

    240907-pkb9ystgqj

  • MD5

    d1ecdca443b90db25d03a49064dfff5d

  • SHA1

    dbb35817c282a5260173d4f22f812f8150c3ea43

  • SHA256

    31bf643527e72068226dc0d8106a7bd09e8cbfd5cc5e221859e886b1bd4267a2

  • SHA512

    a0d0542f5bb36d3f5b21b31cad689eca334a37c6602aa8a3cb5e5cdf02ac986879c6ec0b5f20a455f896a03961580e16daa4e7d1d68164ff9674b2a34d6b0940

  • SSDEEP

    3072:iHFbVlwfSyfkMY+BES09JXAnyrZalI+YQ:ilbVufXsMYod+X3oI+YQ

Score
10/10
ramnitbankerdiscoveryspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      d1ecdca443b90db25d03a49064dfff5d_JaffaCakes118

    • Size

      156KB

    • MD5

      d1ecdca443b90db25d03a49064dfff5d

    • SHA1

      dbb35817c282a5260173d4f22f812f8150c3ea43

    • SHA256

      31bf643527e72068226dc0d8106a7bd09e8cbfd5cc5e221859e886b1bd4267a2

    • SHA512

      a0d0542f5bb36d3f5b21b31cad689eca334a37c6602aa8a3cb5e5cdf02ac986879c6ec0b5f20a455f896a03961580e16daa4e7d1d68164ff9674b2a34d6b0940

    • SSDEEP

      3072:iHFbVlwfSyfkMY+BES09JXAnyrZalI+YQ:ilbVufXsMYod+X3oI+YQ

    Score
    10/10
    ramnitbankerdiscoveryspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks