Overview

overview

10

Static

static

3

JaffaCakes...40.exe

windows7-x64

10

JaffaCakes...40.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_44bc6a85155a66270e3f3519dbe25440

  • Size

    660KB

  • Sample

    250101-dhjepsslc1

  • MD5

    44bc6a85155a66270e3f3519dbe25440

  • SHA1

    1e866e797be3ae02cfced75ca11dfbdc26ead266

  • SHA256

    d4872dd5974c293e0594d61291212d9868657918a0f85c34166be16e6d46f605

  • SHA512

    ac22c38573d67c8ef4eea07d9bc79776386917f40b449988cdee16e39b7d1c2a583191a4201627b1deb16cb03fb9d72a77b79609b9728009a5e2651f6f73dc73

  • SSDEEP

    12288:k16zhbcKiFyKBU/eEr3kxoj2x2P7F+WunPv1:hdbyyKymE7kydP7Y/n

Score
10/10
blackmoonramnitbankerdiscoveryspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      JaffaCakes118_44bc6a85155a66270e3f3519dbe25440

    • Size

      660KB

    • MD5

      44bc6a85155a66270e3f3519dbe25440

    • SHA1

      1e866e797be3ae02cfced75ca11dfbdc26ead266

    • SHA256

      d4872dd5974c293e0594d61291212d9868657918a0f85c34166be16e6d46f605

    • SHA512

      ac22c38573d67c8ef4eea07d9bc79776386917f40b449988cdee16e39b7d1c2a583191a4201627b1deb16cb03fb9d72a77b79609b9728009a5e2651f6f73dc73

    • SSDEEP

      12288:k16zhbcKiFyKBU/eEr3kxoj2x2P7F+WunPv1:hdbyyKymE7kydP7Y/n

    Score
    10/10
    blackmoonramnitbankerdiscoveryspywarestealertrojanupxworm

    • Blackmoon family

      blackmoon

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Ramnit family

      ramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks