Overview

overview

10

Static

static

3

JaffaCakes...e0.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_b86a36df8d86ef63d40fd590498740e0

  • Size

    428KB

  • Sample

    250414-vhrjravyez

  • MD5

    b86a36df8d86ef63d40fd590498740e0

  • SHA1

    d195ee140eea6305d611cd113b09fd9f90bcee0f

  • SHA256

    3de1963e7b3059b8bdc478488eb223b68809750f136ec59979d4667a69fdc204

  • SHA512

    2f739ef10829b120a1559fcfa3a62299111c5f892dbf319c1c5445d2df846730600fea9140d08fe61a7eb91fbded969c0f9eac8165b53b67c76411ff275ea2f1

  • SSDEEP

    12288:epsye6NII3ZecCxJ4SVTk5Je1fHnYBhNOO5mml7p1SuZVf6d6EOGRjO70LvgSnTi:mFBLD4LvNnwJLVg

Score
10/10
ramnitbankerdiscoveryspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      JaffaCakes118_b86a36df8d86ef63d40fd590498740e0

    • Size

      428KB

    • MD5

      b86a36df8d86ef63d40fd590498740e0

    • SHA1

      d195ee140eea6305d611cd113b09fd9f90bcee0f

    • SHA256

      3de1963e7b3059b8bdc478488eb223b68809750f136ec59979d4667a69fdc204

    • SHA512

      2f739ef10829b120a1559fcfa3a62299111c5f892dbf319c1c5445d2df846730600fea9140d08fe61a7eb91fbded969c0f9eac8165b53b67c76411ff275ea2f1

    • SSDEEP

      12288:epsye6NII3ZecCxJ4SVTk5Je1fHnYBhNOO5mml7p1SuZVf6d6EOGRjO70LvgSnTi:mFBLD4LvNnwJLVg

    Score
    10/10
    ramnitbankerdiscoveryspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Ramnit family

      ramnit

    • Executes dropped EXE

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks