General

  • Target

    0f5857a1d196ed639791e530b83c841d_JaffaCakes118

  • Size

    158KB

  • Sample

    241003-sqhwgasbrp

  • MD5

    0f5857a1d196ed639791e530b83c841d

  • SHA1

    47a58d6e5939efdb0261f46a0ac1fff9793fe6c6

  • SHA256

    f93ca0c441fabfd860c5a7c95466ef5cbde5051494f44578bc18c6fdb7eb1ba6

  • SHA512

    dc6679552d7bba44c0cd101fb3f2b13f5bc9bf34d7f67198313d9bb34b5577596d4a418d7367059893e0978bff24f52b986c40855855f47997d47ec2e52f4cbb

  • SSDEEP

    3072:iSe2Huj3gyfkMY+BES09JXAnyrZalI+YQ:i92idsMYod+X3oI+YQ

Malware Config

Targets

    • Target

      0f5857a1d196ed639791e530b83c841d_JaffaCakes118

    • Size

      158KB

    • MD5

      0f5857a1d196ed639791e530b83c841d

    • SHA1

      47a58d6e5939efdb0261f46a0ac1fff9793fe6c6

    • SHA256

      f93ca0c441fabfd860c5a7c95466ef5cbde5051494f44578bc18c6fdb7eb1ba6

    • SHA512

      dc6679552d7bba44c0cd101fb3f2b13f5bc9bf34d7f67198313d9bb34b5577596d4a418d7367059893e0978bff24f52b986c40855855f47997d47ec2e52f4cbb

    • SSDEEP

      3072:iSe2Huj3gyfkMY+BES09JXAnyrZalI+YQ:i92idsMYod+X3oI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks