Overview

overview

10

Static

static

3

JaffaCakes...a9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_b27f9fa227c373b12ab10c58d72118a9

  • Size

    113KB

  • Sample

    250412-rlbe6awxdx

  • MD5

    b27f9fa227c373b12ab10c58d72118a9

  • SHA1

    90f35f2facbc014973eabdf833dc4913f58ba653

  • SHA256

    ea7c296f27bee2f3f02d95146e68b1df6c8ca334af6446ee594c472dc62e7b0f

  • SHA512

    f1709a30f0b8897ab9ff8714d6985c356a0b3b5d0c8b4e472e73da4769771fd14ae5cbad0192a56a0b189d14bcc58a7ad29b6f39210e4e6fb8f759811a2f6e19

  • SSDEEP

    3072:4+BLD4edTJtA4mNJGVhKqOrx4J2vNbGfvGnd3gW5ZM4/u:5BLDLTRaJwI/NdndPZMT

Score
10/10
ramnitbankerdiscoveryspywarestealertrojanworm

Malware Config

Targets

    • Target

      JaffaCakes118_b27f9fa227c373b12ab10c58d72118a9

    • Size

      113KB

    • MD5

      b27f9fa227c373b12ab10c58d72118a9

    • SHA1

      90f35f2facbc014973eabdf833dc4913f58ba653

    • SHA256

      ea7c296f27bee2f3f02d95146e68b1df6c8ca334af6446ee594c472dc62e7b0f

    • SHA512

      f1709a30f0b8897ab9ff8714d6985c356a0b3b5d0c8b4e472e73da4769771fd14ae5cbad0192a56a0b189d14bcc58a7ad29b6f39210e4e6fb8f759811a2f6e19

    • SSDEEP

      3072:4+BLD4edTJtA4mNJGVhKqOrx4J2vNbGfvGnd3gW5ZM4/u:5BLDLTRaJwI/NdndPZMT

    Score
    10/10
    ramnitbankerdiscoveryspywarestealertrojanworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Ramnit family

      ramnit

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks