Overview

overview

10

Static

static

3

JaffaCakes...10.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_b945859384156f77ae5b54c9d5ad5b10

  • Size

    533KB

  • Sample

    250415-d1hk5axkz7

  • MD5

    b945859384156f77ae5b54c9d5ad5b10

  • SHA1

    a2359c1d0d3e0b506550de81a8eda077b7d7f9d8

  • SHA256

    813d45c8d57ee598071f97ef1278b851fc3b8ed94442bebe62486c6d419a19c2

  • SHA512

    6869ef0bcde179e3d4862b4b827d760fb74fdbedb4e897313fdfc9d59bd4c3647570ebdd4db95f4dfc3106305905a1fa383e9f2fb6aa578704c19957f1deac91

  • SSDEEP

    12288:bh8fZLyb9PzVMBC/HVMOp4PkxHLCYwZckMQMN31W5t:b8F+Pzr/Hfp4MIYwZckMQmFq

Score
10/10
ramnitbankerdiscoveryspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      JaffaCakes118_b945859384156f77ae5b54c9d5ad5b10

    • Size

      533KB

    • MD5

      b945859384156f77ae5b54c9d5ad5b10

    • SHA1

      a2359c1d0d3e0b506550de81a8eda077b7d7f9d8

    • SHA256

      813d45c8d57ee598071f97ef1278b851fc3b8ed94442bebe62486c6d419a19c2

    • SHA512

      6869ef0bcde179e3d4862b4b827d760fb74fdbedb4e897313fdfc9d59bd4c3647570ebdd4db95f4dfc3106305905a1fa383e9f2fb6aa578704c19957f1deac91

    • SSDEEP

      12288:bh8fZLyb9PzVMBC/HVMOp4PkxHLCYwZckMQMN31W5t:b8F+Pzr/Hfp4MIYwZckMQmFq

    Score
    10/10
    ramnitbankerdiscoveryspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Ramnit family

      ramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks