General

  • Target

    6b68a50fa201cde3b69499d418701ef1_JaffaCakes118

  • Size

    347KB

  • Sample

    240523-sz7k7afh21

  • MD5

    6b68a50fa201cde3b69499d418701ef1

  • SHA1

    d4137543437a7084533b852281aafac6b65ea24a

  • SHA256

    bc4fda286827ea71abf75292e2e41caa2a5afac5ce0ce0f77125d7021693c699

  • SHA512

    3087597d8995d739beed6e44d9906e7220f3f5b9ddd26b5bdfb363d99c22ff133a3b7526f18730541812dfb7370488a03921f95210573ffed1e70a5bb0613158

  • SSDEEP

    6144:TsMYod+X3oI+Y8sMYod+X3oI+Y5sMYod+X3oI+YQ:n5d+X3I5d+X3f5d+X3+

Malware Config

Targets

    • Target

      6b68a50fa201cde3b69499d418701ef1_JaffaCakes118

    • Size

      347KB

    • MD5

      6b68a50fa201cde3b69499d418701ef1

    • SHA1

      d4137543437a7084533b852281aafac6b65ea24a

    • SHA256

      bc4fda286827ea71abf75292e2e41caa2a5afac5ce0ce0f77125d7021693c699

    • SHA512

      3087597d8995d739beed6e44d9906e7220f3f5b9ddd26b5bdfb363d99c22ff133a3b7526f18730541812dfb7370488a03921f95210573ffed1e70a5bb0613158

    • SSDEEP

      6144:TsMYod+X3oI+Y8sMYod+X3oI+Y5sMYod+X3oI+YQ:n5d+X3I5d+X3f5d+X3+

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks