Overview

overview

10

Static

static

3

JaffaCakes...51.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_b5fe91ce6e8f17254364cf732f684851

  • Size

    117KB

  • Sample

    250413-222bmawsht

  • MD5

    b5fe91ce6e8f17254364cf732f684851

  • SHA1

    f79f80bef4ae363df69ad6c85ba7cb2bbd902d92

  • SHA256

    abd02679cdc6e0185480b764f1cac1b16f7337b662f0e0523f3a56e96c8b7b99

  • SHA512

    1f446e0083a34fc82ee36f74d73f01f5281ec42f635cc1ab54b2c42b78ea53c3d86f260ced5e84fc9305fcb95edeb7afe6bca544f5d620b08955f6c7468fb591

  • SSDEEP

    3072:5Tg2vIufer7yfdn7pPqjwaaHw7Koj4rtkqMv:5kynWr7qd71fw

Score
10/10
ramnitbankerdiscoveryspywarestealertrojanworm

Malware Config

Targets

    • Target

      JaffaCakes118_b5fe91ce6e8f17254364cf732f684851

    • Size

      117KB

    • MD5

      b5fe91ce6e8f17254364cf732f684851

    • SHA1

      f79f80bef4ae363df69ad6c85ba7cb2bbd902d92

    • SHA256

      abd02679cdc6e0185480b764f1cac1b16f7337b662f0e0523f3a56e96c8b7b99

    • SHA512

      1f446e0083a34fc82ee36f74d73f01f5281ec42f635cc1ab54b2c42b78ea53c3d86f260ced5e84fc9305fcb95edeb7afe6bca544f5d620b08955f6c7468fb591

    • SSDEEP

      3072:5Tg2vIufer7yfdn7pPqjwaaHw7Koj4rtkqMv:5kynWr7qd71fw

    Score
    10/10
    ramnitbankerdiscoveryspywarestealertrojanworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Ramnit family

      ramnit

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks