Overview

overview

10

Static

static

3

1b3bdebdf3...18.exe

windows7-x64

10

1b3bdebdf3...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1b3bdebdf3a303e095757a0b3f31d3ad_JaffaCakes118

  • Size

    584KB

  • Sample

    240701-n87v4a1ajh

  • MD5

    1b3bdebdf3a303e095757a0b3f31d3ad

  • SHA1

    f4dfceb18ea51b9bdb7cadf647094e22d9c5780d

  • SHA256

    b205fa9c41ad215be4f6340ae9765dafea2eb6511eda1a97f8b55611bd0bc51d

  • SHA512

    3871601b4d476b725f50a52f9697ccf3bd1719395be80b9528d2d6befdc1bb5990647fdc3ff266b9993dbda69c25292c12622915da345d06c687c767a71f137f

  • SSDEEP

    12288:kCi0TKv5p3TtQm0x7llzTwsvjXhVsf14c8XfO921RWX:/iDvTq5xrTwsvjEf14c8vx16

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      1b3bdebdf3a303e095757a0b3f31d3ad_JaffaCakes118

    • Size

      584KB

    • MD5

      1b3bdebdf3a303e095757a0b3f31d3ad

    • SHA1

      f4dfceb18ea51b9bdb7cadf647094e22d9c5780d

    • SHA256

      b205fa9c41ad215be4f6340ae9765dafea2eb6511eda1a97f8b55611bd0bc51d

    • SHA512

      3871601b4d476b725f50a52f9697ccf3bd1719395be80b9528d2d6befdc1bb5990647fdc3ff266b9993dbda69c25292c12622915da345d06c687c767a71f137f

    • SSDEEP

      12288:kCi0TKv5p3TtQm0x7llzTwsvjXhVsf14c8XfO921RWX:/iDvTq5xrTwsvjEf14c8vx16

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks