Overview

overview

10

Static

static

1

efd1b44165...8.html

windows7-x64

10

efd1b44165...8.html

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    efd1b441656b84b11c99b3e13ee1c3cb_JaffaCakes118

  • Size

    2.7MB

  • Sample

    240921-pxj6bsshmp

  • MD5

    efd1b441656b84b11c99b3e13ee1c3cb

  • SHA1

    4c2ea7fdf6783eea922a39de4fd056f0277961ef

  • SHA256

    6bb8a3f1fe5b7772497ef37b1195ad1b4df31147484fd5661e115541ba70b258

  • SHA512

    171f9bd4f434fa75034d1b670abbe1d5b15b1eb28ee7ee69dd18733d8eadb7f78ee43bcaf809861b933c521aa54c7cb8252f7c6f88b1f2b85ad0218cf50a63a2

  • SSDEEP

    24576:2+aDHsa+aDHs1+aDHs/+aDHsx+aDHsz/+aDHs1:IS

Score
10/10
ramnitbankerdiscoveryspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      efd1b441656b84b11c99b3e13ee1c3cb_JaffaCakes118

    • Size

      2.7MB

    • MD5

      efd1b441656b84b11c99b3e13ee1c3cb

    • SHA1

      4c2ea7fdf6783eea922a39de4fd056f0277961ef

    • SHA256

      6bb8a3f1fe5b7772497ef37b1195ad1b4df31147484fd5661e115541ba70b258

    • SHA512

      171f9bd4f434fa75034d1b670abbe1d5b15b1eb28ee7ee69dd18733d8eadb7f78ee43bcaf809861b933c521aa54c7cb8252f7c6f88b1f2b85ad0218cf50a63a2

    • SSDEEP

      24576:2+aDHsa+aDHs1+aDHs/+aDHsx+aDHsz/+aDHs1:IS

    Score
    10/10
    ramnitbankerdiscoveryspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks