General

  • Target

    81fbe8f40f3b937a24faba9b28c59919_JaffaCakes118

  • Size

    292KB

  • Sample

    240529-1aywraad61

  • MD5

    81fbe8f40f3b937a24faba9b28c59919

  • SHA1

    ca8d987a88a0d604baa6763a9ffc72c71e3c9646

  • SHA256

    429bea54cd0091648c8c07f447c097357c5af4153c4556c0b66f095cd4de93fa

  • SHA512

    bee57881d6c31dd9b957e87fe7d40c3758a1707dc03d2f3acb060b5c5bd52baeaf6b9141aba36964be770316a8f03f419c50b8682a9dac2ee704da3b02ca9811

  • SSDEEP

    6144:SXjsMYod+X3oI+YjsMYod+X3oI+YLsMYod+L:C35d+X3V5d+X315d+L

Malware Config

Targets

    • Target

      81fbe8f40f3b937a24faba9b28c59919_JaffaCakes118

    • Size

      292KB

    • MD5

      81fbe8f40f3b937a24faba9b28c59919

    • SHA1

      ca8d987a88a0d604baa6763a9ffc72c71e3c9646

    • SHA256

      429bea54cd0091648c8c07f447c097357c5af4153c4556c0b66f095cd4de93fa

    • SHA512

      bee57881d6c31dd9b957e87fe7d40c3758a1707dc03d2f3acb060b5c5bd52baeaf6b9141aba36964be770316a8f03f419c50b8682a9dac2ee704da3b02ca9811

    • SSDEEP

      6144:SXjsMYod+X3oI+YjsMYod+X3oI+YLsMYod+L:C35d+X3V5d+X315d+L

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks