General

  • Target

    c8f78001536b2d894e016acf644cfda3_JaffaCakes118

  • Size

    156KB

  • Sample

    240829-rcsyvavgna

  • MD5

    c8f78001536b2d894e016acf644cfda3

  • SHA1

    35706236f7f2573f49e3d7b29eb0c01686204dcf

  • SHA256

    d2167791760e68cb6594a231f9a6b6a1f59e92c3eb7f0ba213749b9bc5b55b8d

  • SHA512

    b6adccacdb92bd8c0f0a0db6374bca241efb452cf0813c6700dc8182c82dfe82460afd85d9d2879c41a7955eb86c29ef4348961b22aad738cf94290880e0d974

  • SSDEEP

    3072:iRfrrEVuEE6yfkMY+BES09JXAnyrZalI+YQ:itrAVNEfsMYod+X3oI+YQ

Malware Config

Targets

    • Target

      c8f78001536b2d894e016acf644cfda3_JaffaCakes118

    • Size

      156KB

    • MD5

      c8f78001536b2d894e016acf644cfda3

    • SHA1

      35706236f7f2573f49e3d7b29eb0c01686204dcf

    • SHA256

      d2167791760e68cb6594a231f9a6b6a1f59e92c3eb7f0ba213749b9bc5b55b8d

    • SHA512

      b6adccacdb92bd8c0f0a0db6374bca241efb452cf0813c6700dc8182c82dfe82460afd85d9d2879c41a7955eb86c29ef4348961b22aad738cf94290880e0d974

    • SSDEEP

      3072:iRfrrEVuEE6yfkMY+BES09JXAnyrZalI+YQ:itrAVNEfsMYod+X3oI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks