Overview

overview

10

Static

static

3

1ad9f47d4f...18.exe

windows7-x64

10

1ad9f47d4f...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1ad9f47d4fa2df84ab83c9841fe834c8_JaffaCakes118

  • Size

    700KB

  • Sample

    240701-lyv3favdma

  • MD5

    1ad9f47d4fa2df84ab83c9841fe834c8

  • SHA1

    9524c8131e65388180c295378ca2e3dc488ceb74

  • SHA256

    77ffb97430bf3dbfd7fbf06a9e30e10f029477d7d80d2a2fae9d9b3dfe4569ca

  • SHA512

    c406433825dc2c14c7bdb20abf501c18ad653417720375b6eba7c770e72ebbb3ff2968cbc53b0bb0a7f6685309fc47a4ab09927a13b70c01a0f22ceb3c119876

  • SSDEEP

    12288:QpX4+tRfb9Z9O/pviCpZgyJcT0NiHp8C0Dimvl/w4wtg/T8Tgi:QpX4+HhOBvsHgig2V2/T88i

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      1ad9f47d4fa2df84ab83c9841fe834c8_JaffaCakes118

    • Size

      700KB

    • MD5

      1ad9f47d4fa2df84ab83c9841fe834c8

    • SHA1

      9524c8131e65388180c295378ca2e3dc488ceb74

    • SHA256

      77ffb97430bf3dbfd7fbf06a9e30e10f029477d7d80d2a2fae9d9b3dfe4569ca

    • SHA512

      c406433825dc2c14c7bdb20abf501c18ad653417720375b6eba7c770e72ebbb3ff2968cbc53b0bb0a7f6685309fc47a4ab09927a13b70c01a0f22ceb3c119876

    • SSDEEP

      12288:QpX4+tRfb9Z9O/pviCpZgyJcT0NiHp8C0Dimvl/w4wtg/T8Tgi:QpX4+HhOBvsHgig2V2/T88i

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks