General

  • Target

    4e536439102fdf1dfe7270c0e90cd1de_JaffaCakes118

  • Size

    480KB

  • Sample

    240517-egvl1sgc3w

  • MD5

    4e536439102fdf1dfe7270c0e90cd1de

  • SHA1

    1adbf8a89adcade128db8635378f6033744fa26f

  • SHA256

    fd060debbad922babcaa292c6b050206a5b0e3d5c7bf0f0d31f34510559ec741

  • SHA512

    0a059e16cf02c1ee6c990116aa21065d993472a7400e4ab80848740c5ab873333c0039791bfcf6d38e171acf3bded54d1f4bd1b91c6a0e395a8b0023ec604456

  • SSDEEP

    6144:SGlXsMYod+X3oI+Y6tvu6xAmzM86P5sZpMFzBtug4r1GcFBU/b:z5d+X3poCPuzmrugwG2qz

Malware Config

Targets

    • Target

      4e536439102fdf1dfe7270c0e90cd1de_JaffaCakes118

    • Size

      480KB

    • MD5

      4e536439102fdf1dfe7270c0e90cd1de

    • SHA1

      1adbf8a89adcade128db8635378f6033744fa26f

    • SHA256

      fd060debbad922babcaa292c6b050206a5b0e3d5c7bf0f0d31f34510559ec741

    • SHA512

      0a059e16cf02c1ee6c990116aa21065d993472a7400e4ab80848740c5ab873333c0039791bfcf6d38e171acf3bded54d1f4bd1b91c6a0e395a8b0023ec604456

    • SSDEEP

      6144:SGlXsMYod+X3oI+Y6tvu6xAmzM86P5sZpMFzBtug4r1GcFBU/b:z5d+X3poCPuzmrugwG2qz

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks