Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

JaffaCakes...90.dll

windows7-x64

10

JaffaCakes...90.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_858e46de6d27d713e4aa417a2c028d90

  • Size

    260KB

  • Sample

    250322-cmpa3szkt8

  • MD5

    858e46de6d27d713e4aa417a2c028d90

  • SHA1

    1b122097b6f2b7cd638acb909e8847a0f6fc563c

  • SHA256

    93310c6eb657d6bb8214af7c141cbd5935bb978380cb8d89701de6ee01cf5676

  • SHA512

    4772b6953cbd226ba1f4d793106a4cf7d6c21a1cec76d4880c306d195ec91effc92905fb6a17e8d55464959580b7856ee12eae9b72dbe869707fa288381e7853

  • SSDEEP

    3072:bm07c4fHCp/AZX/AGUBUpV7Os2kKerYVSrfishHwJjocVFEneeVQIcMrsNNqHI5:97dHCc/ASsad1rasdUVUnon2

Score
10/10
ramnitbankerdiscoveryspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      JaffaCakes118_858e46de6d27d713e4aa417a2c028d90

    • Size

      260KB

    • MD5

      858e46de6d27d713e4aa417a2c028d90

    • SHA1

      1b122097b6f2b7cd638acb909e8847a0f6fc563c

    • SHA256

      93310c6eb657d6bb8214af7c141cbd5935bb978380cb8d89701de6ee01cf5676

    • SHA512

      4772b6953cbd226ba1f4d793106a4cf7d6c21a1cec76d4880c306d195ec91effc92905fb6a17e8d55464959580b7856ee12eae9b72dbe869707fa288381e7853

    • SSDEEP

      3072:bm07c4fHCp/AZX/AGUBUpV7Os2kKerYVSrfishHwJjocVFEneeVQIcMrsNNqHI5:97dHCc/ASsad1rasdUVUnon2

    Score
    10/10
    ramnitbankerdiscoveryspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Ramnit family

      ramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks