Overview

overview

10

Static

static

3

JaffaCakes...50.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_b34bc7bcf2081abb6b64b1cb66fb2150

  • Size

    240KB

  • Sample

    250413-cyhyfaxks7

  • MD5

    b34bc7bcf2081abb6b64b1cb66fb2150

  • SHA1

    d4059bb409e39a91d268984c0466654daf73faa8

  • SHA256

    3e271a49a6cc3bd4a78d38ab07dc33dbbf692fcce4c22677548610a962f24c8e

  • SHA512

    228db2686d7fe67822e1054959e89f1294fd8678be65d7fcbbff9023ddc292a146caea5046b1afdcd6cafec1bdebf4dfe4db9ee30aa16db8e96fbe650833199d

  • SSDEEP

    3072:dNzt20uHs4Lhun3AZi3SnTyS72V7jzzCqHwJHoc8WqR08YqPfqT/GXIfLZVphx:/zFn4ut3Oy+2xjXfI8wfqPfqTaIfLB/

Score
10/10
ramnitbankerdiscoveryspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      JaffaCakes118_b34bc7bcf2081abb6b64b1cb66fb2150

    • Size

      240KB

    • MD5

      b34bc7bcf2081abb6b64b1cb66fb2150

    • SHA1

      d4059bb409e39a91d268984c0466654daf73faa8

    • SHA256

      3e271a49a6cc3bd4a78d38ab07dc33dbbf692fcce4c22677548610a962f24c8e

    • SHA512

      228db2686d7fe67822e1054959e89f1294fd8678be65d7fcbbff9023ddc292a146caea5046b1afdcd6cafec1bdebf4dfe4db9ee30aa16db8e96fbe650833199d

    • SSDEEP

      3072:dNzt20uHs4Lhun3AZi3SnTyS72V7jzzCqHwJHoc8WqR08YqPfqT/GXIfLZVphx:/zFn4ut3Oy+2xjXfI8wfqPfqTaIfLB/

    Score
    10/10
    ramnitbankerdiscoveryspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Ramnit family

      ramnit

    • Executes dropped EXE

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks