General

  • Target

    1731281bb993cf2d94584c2c65e038f5_JaffaCakes118

  • Size

    359KB

  • Sample

    241005-lt4h1ssgnh

  • MD5

    1731281bb993cf2d94584c2c65e038f5

  • SHA1

    c6a9fab3d8cc4405de59c25744ef37e125b514b2

  • SHA256

    94c22482f0975b2bcb7faa8164753d6abcf7683c005dc7ff6f92674912fbb805

  • SHA512

    1239e77e14328c7cf44fb3184d7f9cb827b3c639540dfb3294a201cce275e0a6d62095373e4d56789b52199ea1f6d1efbc0f5e8d48c6f2b6387d64c7368be274

  • SSDEEP

    6144:EIjWrQOBLTgII56kzK8ja4CEI/W//L6WvC:h4B4IIYkzKd4CEyW//L6W6

Malware Config

Targets

    • Target

      1731281bb993cf2d94584c2c65e038f5_JaffaCakes118

    • Size

      359KB

    • MD5

      1731281bb993cf2d94584c2c65e038f5

    • SHA1

      c6a9fab3d8cc4405de59c25744ef37e125b514b2

    • SHA256

      94c22482f0975b2bcb7faa8164753d6abcf7683c005dc7ff6f92674912fbb805

    • SHA512

      1239e77e14328c7cf44fb3184d7f9cb827b3c639540dfb3294a201cce275e0a6d62095373e4d56789b52199ea1f6d1efbc0f5e8d48c6f2b6387d64c7368be274

    • SSDEEP

      6144:EIjWrQOBLTgII56kzK8ja4CEI/W//L6WvC:h4B4IIYkzKd4CEyW//L6W6

    • Modifies WinLogon for persistence

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks