Overview

overview

10

Static

static

3

JaffaCakes...c0.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_b76ee6ca0479c0ef74ae395e0bd401c0

  • Size

    679KB

  • Sample

    250414-mr8wdswzhz

  • MD5

    b76ee6ca0479c0ef74ae395e0bd401c0

  • SHA1

    980aaa4a6d1539c432572b6d787cdf0195cd6c02

  • SHA256

    83060a708899ae7de3a0740dccb81393eec89a4da023e2ad3bba6a9362e48f44

  • SHA512

    f073e0f95dc293e9e147f6ee4c4bd2372140f3b532937d01014e8440fc96f7bf13640e5ad605c999f0fc5b070a1dfb6765ff9915e5df523bfd3f8c097ba59f9f

  • SSDEEP

    12288:rNIyZN4+Wv4PLq6Okrh9ZN/hs9DsdrUkaAHCbRs:r9TPmirh9Zdh6pFbRs

Score
10/10
ramnitbankerdiscoveryspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      JaffaCakes118_b76ee6ca0479c0ef74ae395e0bd401c0

    • Size

      679KB

    • MD5

      b76ee6ca0479c0ef74ae395e0bd401c0

    • SHA1

      980aaa4a6d1539c432572b6d787cdf0195cd6c02

    • SHA256

      83060a708899ae7de3a0740dccb81393eec89a4da023e2ad3bba6a9362e48f44

    • SHA512

      f073e0f95dc293e9e147f6ee4c4bd2372140f3b532937d01014e8440fc96f7bf13640e5ad605c999f0fc5b070a1dfb6765ff9915e5df523bfd3f8c097ba59f9f

    • SSDEEP

      12288:rNIyZN4+Wv4PLq6Okrh9ZN/hs9DsdrUkaAHCbRs:r9TPmirh9Zdh6pFbRs

    Score
    10/10
    ramnitbankerdiscoveryspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Ramnit family

      ramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks