Overview

overview

10

Static

static

3

JaffaCakes...e0.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_b494b160988f95c85119ea973f54a9e0

  • Size

    904KB

  • Sample

    250413-n4mdlavnt6

  • MD5

    b494b160988f95c85119ea973f54a9e0

  • SHA1

    0b93eccd0000a1c5841c953fbe2600a10bc7b3cd

  • SHA256

    ffc83ceb68656785284b208d01533eac13607bf152f3ac49f28d12ca292c8ac7

  • SHA512

    397a04352db620917d2a34a927038e1b1b610f8daa6d72fbbdbccaac9786926d9389eaa01c9a0b2ef3ccc6b9b5071f11b446e263b4ba6c4e5ee9c6a4e1fab7bd

  • SSDEEP

    24576:0IZ9+e3LFRbk4vQL9TQVt5OntyUmP10wauIOmn1mmb18jfB/csw50jfBP:zQZ0Br41Lb1sTB

Score
10/10
ramnitbankerdiscoveryspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      JaffaCakes118_b494b160988f95c85119ea973f54a9e0

    • Size

      904KB

    • MD5

      b494b160988f95c85119ea973f54a9e0

    • SHA1

      0b93eccd0000a1c5841c953fbe2600a10bc7b3cd

    • SHA256

      ffc83ceb68656785284b208d01533eac13607bf152f3ac49f28d12ca292c8ac7

    • SHA512

      397a04352db620917d2a34a927038e1b1b610f8daa6d72fbbdbccaac9786926d9389eaa01c9a0b2ef3ccc6b9b5071f11b446e263b4ba6c4e5ee9c6a4e1fab7bd

    • SSDEEP

      24576:0IZ9+e3LFRbk4vQL9TQVt5OntyUmP10wauIOmn1mmb18jfB/csw50jfBP:zQZ0Br41Lb1sTB

    Score
    10/10
    ramnitbankerdiscoveryspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Ramnit family

      ramnit

    • Executes dropped EXE

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks