Overview

overview

10

Static

static

3

JaffaCakes...42.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_b6d616d61ef4b2965622683c3f214c42

  • Size

    168KB

  • Sample

    250414-gxbj7a11gz

  • MD5

    b6d616d61ef4b2965622683c3f214c42

  • SHA1

    b95d1e6326c1dca4e5822d83a79878c5b94b26bd

  • SHA256

    064b30d137086814bbf1b1c0a5c4268d789b1c61ed84d54d17eec7deeaa0a6ba

  • SHA512

    b6cb695d14f97d754ab0a36d1278e7958c1089f13f36ec334d202806b25a4c6269200a186b30aff8a279a0a2340854fb584bc1231d1b564e36be44f6705ee286

  • SSDEEP

    3072:wbEn+F/nWtpFYLnH5Nj6D+yvl1GSp1OaJq2fM9ikt:KPiYLnHD6Kyz/12Is

Score
10/10
ramnitbankerdiscoveryspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      JaffaCakes118_b6d616d61ef4b2965622683c3f214c42

    • Size

      168KB

    • MD5

      b6d616d61ef4b2965622683c3f214c42

    • SHA1

      b95d1e6326c1dca4e5822d83a79878c5b94b26bd

    • SHA256

      064b30d137086814bbf1b1c0a5c4268d789b1c61ed84d54d17eec7deeaa0a6ba

    • SHA512

      b6cb695d14f97d754ab0a36d1278e7958c1089f13f36ec334d202806b25a4c6269200a186b30aff8a279a0a2340854fb584bc1231d1b564e36be44f6705ee286

    • SSDEEP

      3072:wbEn+F/nWtpFYLnH5Nj6D+yvl1GSp1OaJq2fM9ikt:KPiYLnHD6Kyz/12Is

    Score
    10/10
    ramnitbankerdiscoveryspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Ramnit family

      ramnit

    • Executes dropped EXE

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks