Overview

overview

10

Static

static

3

JaffaCakes...da.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_b58bc681e6e4a5ee6ebe894dd3f1fada

  • Size

    304KB

  • Sample

    250413-xxjtka1qy7

  • MD5

    b58bc681e6e4a5ee6ebe894dd3f1fada

  • SHA1

    53434858e0a219f491d52f6c841e576d0e1ea22f

  • SHA256

    6adbf86e8482081eb9dcd463f2fe50315bd3462bfd7a390b6ed308728401848e

  • SHA512

    7e81db12d1de9c3806bf138fc0246dbb5e043f5171dec3870af3ac7e985c8b4521df9535b991aa1b6010cfb59f7edd329d5b00103e80f0ef247ae9a7e10691dc

  • SSDEEP

    6144:4Qb6g1fEi2FSGXbOYvz2+uOpGTIttHUUYTB/tZeXSGxU7MxaQs2nbv:4ttBEGXKSqEpGTIPdYT9tZeXFxcZQs27

Score
10/10
ramnitbankerdiscoveryspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      JaffaCakes118_b58bc681e6e4a5ee6ebe894dd3f1fada

    • Size

      304KB

    • MD5

      b58bc681e6e4a5ee6ebe894dd3f1fada

    • SHA1

      53434858e0a219f491d52f6c841e576d0e1ea22f

    • SHA256

      6adbf86e8482081eb9dcd463f2fe50315bd3462bfd7a390b6ed308728401848e

    • SHA512

      7e81db12d1de9c3806bf138fc0246dbb5e043f5171dec3870af3ac7e985c8b4521df9535b991aa1b6010cfb59f7edd329d5b00103e80f0ef247ae9a7e10691dc

    • SSDEEP

      6144:4Qb6g1fEi2FSGXbOYvz2+uOpGTIttHUUYTB/tZeXSGxU7MxaQs2nbv:4ttBEGXKSqEpGTIPdYT9tZeXFxcZQs27

    Score
    10/10
    ramnitbankerdiscoveryspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Ramnit family

      ramnit

    • Executes dropped EXE

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks