Overview

overview

10

Static

static

3

JaffaCakes...41.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_b9a225077668078c82787f02091fa841

  • Size

    309KB

  • Sample

    250415-lwyesa1ps7

  • MD5

    b9a225077668078c82787f02091fa841

  • SHA1

    1d3b8681a5c04965938175cb1ea792c9370cce6d

  • SHA256

    94a3a00de6c87443a0941e089cb0db04674a6c0094ddef85a48baf61dfc7654c

  • SHA512

    ace70fdd277424d4df1ecc227a5ea95d9fe11ac742eeef5b998dfca65092ef391019d391b5c0e97fb098bf5eeac24d5ea14462fdd4e61b5bafbc70510ee6249c

  • SSDEEP

    6144:W25rerE2hT+XUanF8NTQ84rDuYvGnZtDX1qZzpRbwk2:nIwe+UaTwEZzpRbo

Score
10/10
ramnitbankerdiscoveryspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      JaffaCakes118_b9a225077668078c82787f02091fa841

    • Size

      309KB

    • MD5

      b9a225077668078c82787f02091fa841

    • SHA1

      1d3b8681a5c04965938175cb1ea792c9370cce6d

    • SHA256

      94a3a00de6c87443a0941e089cb0db04674a6c0094ddef85a48baf61dfc7654c

    • SHA512

      ace70fdd277424d4df1ecc227a5ea95d9fe11ac742eeef5b998dfca65092ef391019d391b5c0e97fb098bf5eeac24d5ea14462fdd4e61b5bafbc70510ee6249c

    • SSDEEP

      6144:W25rerE2hT+XUanF8NTQ84rDuYvGnZtDX1qZzpRbwk2:nIwe+UaTwEZzpRbo

    Score
    10/10
    ramnitbankerdiscoveryspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Ramnit family

      ramnit

    • Executes dropped EXE

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks