Overview

overview

10

Static

static

1

dbc0b96162...8.html

windows7-x64

10

dbc0b96162...8.html

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    dbc0b96162c1293f77cdaa4e3a9a3f6f_JaffaCakes118

  • Size

    130KB

  • Sample

    240912-ebadwszcqb

  • MD5

    dbc0b96162c1293f77cdaa4e3a9a3f6f

  • SHA1

    d0bb9e024a65fb812ec2b1dc7030b89459751d7e

  • SHA256

    f0f65096f4d5340f7ac40a0e6736d0b8ab21e71ef6ab8b2f2ecfbc4c8c971e2a

  • SHA512

    87d4d5a1511697248bf6e87de2abb732ccfb1f7d3a5e74fae9066d3f24f6e701489e853eae494825632d3dfdba8ee85cb2d32106f4b949d2922b61e8a9d786d7

  • SSDEEP

    3072:S2dB58tPVyfkMY+BES09JXAnyrZalI+YQ:S2dB58ZAsMYod+X3oI+YQ

Score
10/10
ramnitbankerdiscoveryspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      dbc0b96162c1293f77cdaa4e3a9a3f6f_JaffaCakes118

    • Size

      130KB

    • MD5

      dbc0b96162c1293f77cdaa4e3a9a3f6f

    • SHA1

      d0bb9e024a65fb812ec2b1dc7030b89459751d7e

    • SHA256

      f0f65096f4d5340f7ac40a0e6736d0b8ab21e71ef6ab8b2f2ecfbc4c8c971e2a

    • SHA512

      87d4d5a1511697248bf6e87de2abb732ccfb1f7d3a5e74fae9066d3f24f6e701489e853eae494825632d3dfdba8ee85cb2d32106f4b949d2922b61e8a9d786d7

    • SSDEEP

      3072:S2dB58tPVyfkMY+BES09JXAnyrZalI+YQ:S2dB58ZAsMYod+X3oI+YQ

    Score
    10/10
    ramnitbankerdiscoveryspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks