Overview

overview

10

Static

static

3

JaffaCakes...e5.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_b8e474b91289bf1cedbce42586ee24e5

  • Size

    412KB

  • Sample

    250414-zr1aga1ls2

  • MD5

    b8e474b91289bf1cedbce42586ee24e5

  • SHA1

    94d98e9a958bd76fee86f4c32324b10142bbe53b

  • SHA256

    b4d0d4f8ab0d0c620f46480511dbff585065f1629400b44b9218dec3d8212201

  • SHA512

    886ccdef7ae14bd207dbfe1b3f03241d330712a03274055df942038f4391648210c1400d20fa7bd038b7cdb48d88175540fb68e7e1cee6e6af62310154dac588

  • SSDEEP

    6144:sayocjqchgZZWnvpIH0G6AE3ZoPw5WxOYd8r2RO4kF+RmHK9:sayocjqWgZZu+DE3ZXmLd5k43uk

Score
10/10
ramnitbankerdiscoveryspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      JaffaCakes118_b8e474b91289bf1cedbce42586ee24e5

    • Size

      412KB

    • MD5

      b8e474b91289bf1cedbce42586ee24e5

    • SHA1

      94d98e9a958bd76fee86f4c32324b10142bbe53b

    • SHA256

      b4d0d4f8ab0d0c620f46480511dbff585065f1629400b44b9218dec3d8212201

    • SHA512

      886ccdef7ae14bd207dbfe1b3f03241d330712a03274055df942038f4391648210c1400d20fa7bd038b7cdb48d88175540fb68e7e1cee6e6af62310154dac588

    • SSDEEP

      6144:sayocjqchgZZWnvpIH0G6AE3ZoPw5WxOYd8r2RO4kF+RmHK9:sayocjqWgZZu+DE3ZXmLd5k43uk

    Score
    10/10
    ramnitbankerdiscoveryspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Ramnit family

      ramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks