Overview

overview

10

Static

static

3

d85945a9d7...18.dll

windows7-x64

10

d85945a9d7...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d85945a9d77036bf24d672756c2d9b70_JaffaCakes118

  • Size

    640KB

  • Sample

    241208-xaftds1qgy

  • MD5

    d85945a9d77036bf24d672756c2d9b70

  • SHA1

    ac2d7be28998edd824dc555e69c184ff4211aaa7

  • SHA256

    bb67852a0adb72a07c0ba464d2d52c928fa3d84ea486252b26980b0e3c93e62f

  • SHA512

    e09bc1f94237e0b35d12c5fb8b93fb8d5d3f7e3010d68a21a9e5876e6d4fbe7c04929d0c58f6a5ce2a990ba45f6a5fce41d84277c119ba92d29582ca160e074f

  • SSDEEP

    12288:EehnaNPpSVZmNxRCwnwm3W3OHIIf5oaGBAqBMAYfjBOpwDkbt:Eeh0PpS6NxNnwYeOHX+aGeqxQXkbt

Score
10/10
ramnitbankerdefense_evasiondiscoveryspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      d85945a9d77036bf24d672756c2d9b70_JaffaCakes118

    • Size

      640KB

    • MD5

      d85945a9d77036bf24d672756c2d9b70

    • SHA1

      ac2d7be28998edd824dc555e69c184ff4211aaa7

    • SHA256

      bb67852a0adb72a07c0ba464d2d52c928fa3d84ea486252b26980b0e3c93e62f

    • SHA512

      e09bc1f94237e0b35d12c5fb8b93fb8d5d3f7e3010d68a21a9e5876e6d4fbe7c04929d0c58f6a5ce2a990ba45f6a5fce41d84277c119ba92d29582ca160e074f

    • SSDEEP

      12288:EehnaNPpSVZmNxRCwnwm3W3OHIIf5oaGBAqBMAYfjBOpwDkbt:Eeh0PpS6NxNnwYeOHX+aGeqxQXkbt

    Score
    10/10
    ramnitbankerdefense_evasiondiscoveryspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Ramnit family

      ramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks