General

  • Target

    838fa4048064490e569bbc093d47c6c2_JaffaCakes118

  • Size

    347KB

  • Sample

    240530-kahxjacg33

  • MD5

    838fa4048064490e569bbc093d47c6c2

  • SHA1

    2ddd15f58ab895efac86dd13dc58f0c7b353b2f4

  • SHA256

    b7a156b7fc865fa3916f29d361c32fe544216245947ee4bc4ed381abba83e744

  • SHA512

    b2dbaead4b8b227b43b16f371d6a0f5247ccd280f598d8f772fdaa6acf5cd344a1fe0d5b5dcf5d012e032ecdd535e144ae05163938d4fbace25ef33f9e5d457f

  • SSDEEP

    6144:asMYod+X3oI+YhvlsMYod+X3oI+Y5sMYod+X3oI+YQ:45d+X3J5d+X3f5d+X3+

Malware Config

Targets

    • Target

      838fa4048064490e569bbc093d47c6c2_JaffaCakes118

    • Size

      347KB

    • MD5

      838fa4048064490e569bbc093d47c6c2

    • SHA1

      2ddd15f58ab895efac86dd13dc58f0c7b353b2f4

    • SHA256

      b7a156b7fc865fa3916f29d361c32fe544216245947ee4bc4ed381abba83e744

    • SHA512

      b2dbaead4b8b227b43b16f371d6a0f5247ccd280f598d8f772fdaa6acf5cd344a1fe0d5b5dcf5d012e032ecdd535e144ae05163938d4fbace25ef33f9e5d457f

    • SSDEEP

      6144:asMYod+X3oI+YhvlsMYod+X3oI+Y5sMYod+X3oI+YQ:45d+X3J5d+X3f5d+X3+

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks