Overview

overview

10

Static

static

5

JaffaCakes...28.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_b2cf51e1c87a61c093ca3953d9cd6c28

  • Size

    118KB

  • Sample

    250412-tyq3gsyjy3

  • MD5

    b2cf51e1c87a61c093ca3953d9cd6c28

  • SHA1

    28eb0775726cf06d208f6aeb9aa7ea251c995198

  • SHA256

    5e825c47732b3303670166e5916586793b5c405a9de48c178219506fc58f8bc5

  • SHA512

    6f0c664ed33ac2857a6c99b932923cc55716759a8f18e1beeedaa7c8f141935b89cf22085833928d2e7d4e8e36cb7f1f4a8d1cff0fa9012c742f2b2a9b765bf7

  • SSDEEP

    3072:Mg+3fh/PHrgNUqOBx4J2vNbGfvGnd3gW5ZM4/uBn:l+3fRb9NdndPZMT

Score
10/10
ramnitbankerdiscoveryspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      JaffaCakes118_b2cf51e1c87a61c093ca3953d9cd6c28

    • Size

      118KB

    • MD5

      b2cf51e1c87a61c093ca3953d9cd6c28

    • SHA1

      28eb0775726cf06d208f6aeb9aa7ea251c995198

    • SHA256

      5e825c47732b3303670166e5916586793b5c405a9de48c178219506fc58f8bc5

    • SHA512

      6f0c664ed33ac2857a6c99b932923cc55716759a8f18e1beeedaa7c8f141935b89cf22085833928d2e7d4e8e36cb7f1f4a8d1cff0fa9012c742f2b2a9b765bf7

    • SSDEEP

      3072:Mg+3fh/PHrgNUqOBx4J2vNbGfvGnd3gW5ZM4/uBn:l+3fRb9NdndPZMT

    Score
    10/10
    ramnitbankerdiscoveryspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Ramnit family

      ramnit

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks