Overview

overview

10

Static

static

3

JaffaCakes...1e.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    JaffaCakes118_073c015e92a5e2a9e85a1131ede0e01e

  • Size

    212KB

  • Sample

    250520-jyp53sek8y

  • MD5

    073c015e92a5e2a9e85a1131ede0e01e

  • SHA1

    d20be8a0637d5d672f7b34784f5a39212e5d6677

  • SHA256

    fc0913695b62358993f3d4b41c189d63ecc7d1acdb82f820c552a53d98dde323

  • SHA512

    e51382f8a2e5e797c08b1493324aa3bdcb39e028c1f36c0dd76c2cb8ce2fd952f0bc65e67e87d9ede7bd2a977366619e5c94290fae5c882ba273d9f4c8c3a2f3

  • SSDEEP

    3072:wqPL1/7w6ZAs+VBKOOr7qPTtrlm7qd1XBev1SDJZFpSqqT9ptI53jk:BQVVOsmud1XqSDJZFQ99YJjk

Score
10/10
ramnitbankerdiscoveryspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      JaffaCakes118_073c015e92a5e2a9e85a1131ede0e01e

    • Size

      212KB

    • MD5

      073c015e92a5e2a9e85a1131ede0e01e

    • SHA1

      d20be8a0637d5d672f7b34784f5a39212e5d6677

    • SHA256

      fc0913695b62358993f3d4b41c189d63ecc7d1acdb82f820c552a53d98dde323

    • SHA512

      e51382f8a2e5e797c08b1493324aa3bdcb39e028c1f36c0dd76c2cb8ce2fd952f0bc65e67e87d9ede7bd2a977366619e5c94290fae5c882ba273d9f4c8c3a2f3

    • SSDEEP

      3072:wqPL1/7w6ZAs+VBKOOr7qPTtrlm7qd1XBev1SDJZFpSqqT9ptI53jk:BQVVOsmud1XqSDJZFQ99YJjk

    Score
    10/10
    ramnitbankerdiscoveryspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Ramnit family

      ramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks

OSZAR »