Overview

overview

10

Static

static

5

JaffaCakes...40.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_5c5957f69cbed1d9e5bf609aa8012c40

  • Size

    111KB

  • Sample

    250101-t1pbnsvnhj

  • MD5

    5c5957f69cbed1d9e5bf609aa8012c40

  • SHA1

    fda4ee2749c91e73c6f257965ddc954c525337cd

  • SHA256

    e9757b1507780962cae75f128bb15e2463270122917cf13d0e28f8107ca2f78a

  • SHA512

    b07f26ac4220be7bb7ef764b26fb12f75fad509293e982a58fba3ed31370ec465a5ba4157e74e2b41428f7a4cbae66274bd147621cbf0e81a1fd3df53e1bc1be

  • SSDEEP

    3072:TROzoTq0+RO7IwnY4INIsGfVO/Q0ked8:1kdNwBjvnodk9

Score
10/10
ramnitbankerdiscoveryspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      JaffaCakes118_5c5957f69cbed1d9e5bf609aa8012c40

    • Size

      111KB

    • MD5

      5c5957f69cbed1d9e5bf609aa8012c40

    • SHA1

      fda4ee2749c91e73c6f257965ddc954c525337cd

    • SHA256

      e9757b1507780962cae75f128bb15e2463270122917cf13d0e28f8107ca2f78a

    • SHA512

      b07f26ac4220be7bb7ef764b26fb12f75fad509293e982a58fba3ed31370ec465a5ba4157e74e2b41428f7a4cbae66274bd147621cbf0e81a1fd3df53e1bc1be

    • SSDEEP

      3072:TROzoTq0+RO7IwnY4INIsGfVO/Q0ked8:1kdNwBjvnodk9

    Score
    10/10
    ramnitbankerdiscoveryspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Ramnit family

      ramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks