Overview

overview

10

Static

static

3

16e29d2026...18.dll

windows7-x64

10

16e29d2026...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    16e29d202656377016b1cc688f14d3ba_JaffaCakes118

  • Size

    192KB

  • Sample

    240627-v5g9lasblc

  • MD5

    16e29d202656377016b1cc688f14d3ba

  • SHA1

    c227ffe8809232faea08cc48a8bf65620c34690c

  • SHA256

    1399efbf46edf9ff967b9071813733787b96f45a8606a3dd282fd5e73a074f2f

  • SHA512

    ab228a80e1687c9da7a42290f8788197ce491a19224ef2c22c6973b8eeee24c0e0168d6a3342b3b16888c97660ebcdfeba278f03f7e8c098a9523e3ff3ec1664

  • SSDEEP

    3072:texY2nMibVoSOyyzWBYu+4HJ300Odil9d0C8ZOvZfa/+8B:t+n6SOyyfb23OwdHYORf6+8B

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      16e29d202656377016b1cc688f14d3ba_JaffaCakes118

    • Size

      192KB

    • MD5

      16e29d202656377016b1cc688f14d3ba

    • SHA1

      c227ffe8809232faea08cc48a8bf65620c34690c

    • SHA256

      1399efbf46edf9ff967b9071813733787b96f45a8606a3dd282fd5e73a074f2f

    • SHA512

      ab228a80e1687c9da7a42290f8788197ce491a19224ef2c22c6973b8eeee24c0e0168d6a3342b3b16888c97660ebcdfeba278f03f7e8c098a9523e3ff3ec1664

    • SSDEEP

      3072:texY2nMibVoSOyyzWBYu+4HJ300Odil9d0C8ZOvZfa/+8B:t+n6SOyyfb23OwdHYORf6+8B

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks