General

  • Target

    d5911ae7021fb9646b234377443e86c0_JaffaCakes118

  • Size

    158KB

  • Sample

    241208-gnrvtazpcp

  • MD5

    d5911ae7021fb9646b234377443e86c0

  • SHA1

    f9e59225cd96d5150879f411dd11c5a41417fdf7

  • SHA256

    43cc07ece194e3aceb93ca16e3b002716aa147e0aceac9c0a7bd1c75ced77a1f

  • SHA512

    157afca0cea1324b1ff514c59beab619cfc9363010da524ac1c774e8c51e74fc608139a16048767c9ef982957f1c67c519609d88a17e24f22070e8ea0373d8eb

  • SSDEEP

    3072:itigkui1jyfkMY+BES09JXAnyrZalI+YQ:iwgvi1GsMYod+X3oI+YQ

Malware Config

Targets

    • Target

      d5911ae7021fb9646b234377443e86c0_JaffaCakes118

    • Size

      158KB

    • MD5

      d5911ae7021fb9646b234377443e86c0

    • SHA1

      f9e59225cd96d5150879f411dd11c5a41417fdf7

    • SHA256

      43cc07ece194e3aceb93ca16e3b002716aa147e0aceac9c0a7bd1c75ced77a1f

    • SHA512

      157afca0cea1324b1ff514c59beab619cfc9363010da524ac1c774e8c51e74fc608139a16048767c9ef982957f1c67c519609d88a17e24f22070e8ea0373d8eb

    • SSDEEP

      3072:itigkui1jyfkMY+BES09JXAnyrZalI+YQ:iwgvi1GsMYod+X3oI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Ramnit family

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks