General

  • Target

    8788886228c089c55e3f018b75b00676_JaffaCakes118

  • Size

    236KB

  • Sample

    240531-s8pfzadf89

  • MD5

    8788886228c089c55e3f018b75b00676

  • SHA1

    1497f8395ea4a8d375949ee5ae0f49ebec887948

  • SHA256

    b15d516715d8b01d41315cbabb706175802fc0267c07c2b6250085a5e412999f

  • SHA512

    f4241692ab82844bf291f5a2e83e770e18c5395c8ad5ac5629daa6330065d4c22c9f453549627a86922a5f491b5d5f1efc7deb92790ded06582986267d635f42

  • SSDEEP

    3072:SqyfkMY+BES09JXAnyrZalI+YTtyfkMY+BES09JXAnyrZalI+YQ:SPsMYod+X3oI+Y8sMYod+X3oI+YQ

Malware Config

Targets

    • Target

      8788886228c089c55e3f018b75b00676_JaffaCakes118

    • Size

      236KB

    • MD5

      8788886228c089c55e3f018b75b00676

    • SHA1

      1497f8395ea4a8d375949ee5ae0f49ebec887948

    • SHA256

      b15d516715d8b01d41315cbabb706175802fc0267c07c2b6250085a5e412999f

    • SHA512

      f4241692ab82844bf291f5a2e83e770e18c5395c8ad5ac5629daa6330065d4c22c9f453549627a86922a5f491b5d5f1efc7deb92790ded06582986267d635f42

    • SSDEEP

      3072:SqyfkMY+BES09JXAnyrZalI+YTtyfkMY+BES09JXAnyrZalI+YQ:SPsMYod+X3oI+Y8sMYod+X3oI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks