Overview

overview

10

Static

static

3

JaffaCakes...70.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    JaffaCakes118_07205ac77b600e5e97bfe1ee3e7e5770

  • Size

    188KB

  • Sample

    250519-13y28aek3s

  • MD5

    07205ac77b600e5e97bfe1ee3e7e5770

  • SHA1

    e2a5b851cfe1992b6b9af4afcfddd0a731d57c3c

  • SHA256

    6e02347bca7898c44214a7a11ad96a6043b976ad1a3ee35b1d09d741098db456

  • SHA512

    e592820759c1e60eb017c2c26cb35f311a6255a610c9df20bdef6c3dc7509b59307a53c83471887387becda5fb232457ead89fa06417fce12b254a88bcbc6ab1

  • SSDEEP

    3072:6Cc3BovvxtyyLa3E1oF4wfOKT7J/zYZbxuKCdBfg+A5qsjSpB46SQP:rv7Da3EO2wWKXJLsd4f6qsWpq6SI

Score
10/10
ramnitbankerdiscoveryspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      JaffaCakes118_07205ac77b600e5e97bfe1ee3e7e5770

    • Size

      188KB

    • MD5

      07205ac77b600e5e97bfe1ee3e7e5770

    • SHA1

      e2a5b851cfe1992b6b9af4afcfddd0a731d57c3c

    • SHA256

      6e02347bca7898c44214a7a11ad96a6043b976ad1a3ee35b1d09d741098db456

    • SHA512

      e592820759c1e60eb017c2c26cb35f311a6255a610c9df20bdef6c3dc7509b59307a53c83471887387becda5fb232457ead89fa06417fce12b254a88bcbc6ab1

    • SSDEEP

      3072:6Cc3BovvxtyyLa3E1oF4wfOKT7J/zYZbxuKCdBfg+A5qsjSpB46SQP:rv7Da3EO2wWKXJLsd4f6qsWpq6SI

    Score
    10/10
    ramnitbankerdiscoveryspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Ramnit family

      ramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks

OSZAR »