Overview

overview

10

Static

static

5

JaffaCakes...7a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_b5cce1e1f9dee45f10a19bcd954dfb7a

  • Size

    120KB

  • Sample

    250413-z3n2kssmt5

  • MD5

    b5cce1e1f9dee45f10a19bcd954dfb7a

  • SHA1

    8ee777a50d7ad8eb6402b47327b817c3ca2bdbbb

  • SHA256

    612a05cce1e609225bdac01d222bb27787d1a716a45ba5a277bc1b3fc2cfbc41

  • SHA512

    897689c494b3b1350c0dc36b67d414da9375d41d9e3c3d9347975e7ab904ec183161c61816a4194f4a78bf318b8858db98f2dfa92ca77eb0fd12a6ea36ce7455

  • SSDEEP

    3072:Ig+3fh/PHrgNUqOBx4J2vNbGfvGnd3gW5ZM4/uBnA:h+3fRb9NdndPZMTy

Score
10/10
ramnitbankerdiscoveryspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      JaffaCakes118_b5cce1e1f9dee45f10a19bcd954dfb7a

    • Size

      120KB

    • MD5

      b5cce1e1f9dee45f10a19bcd954dfb7a

    • SHA1

      8ee777a50d7ad8eb6402b47327b817c3ca2bdbbb

    • SHA256

      612a05cce1e609225bdac01d222bb27787d1a716a45ba5a277bc1b3fc2cfbc41

    • SHA512

      897689c494b3b1350c0dc36b67d414da9375d41d9e3c3d9347975e7ab904ec183161c61816a4194f4a78bf318b8858db98f2dfa92ca77eb0fd12a6ea36ce7455

    • SSDEEP

      3072:Ig+3fh/PHrgNUqOBx4J2vNbGfvGnd3gW5ZM4/uBnA:h+3fRb9NdndPZMTy

    Score
    10/10
    ramnitbankerdiscoveryspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Ramnit family

      ramnit

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks