General

  • Target

    d6cd8e671a13fb06cb19c6d3d816d27f_JaffaCakes118

  • Size

    120KB

  • Sample

    241208-njhvnswrhq

  • MD5

    d6cd8e671a13fb06cb19c6d3d816d27f

  • SHA1

    5eaab949aa5afeb8311a68d58f0e911905fcb49e

  • SHA256

    610325c96cffc00d183884a88b9ce181b875c3267c491195650304b1fface787

  • SHA512

    8aa01d5812319a5cb2b878b39642534790ac1e909d2b8a3ed1d03daf8a11e7208a82cacb8b6f983ac76a2b632ed6096b24007c4fe4646ffadc072eb65e1e0292

  • SSDEEP

    3072:S4+L1lde8yfkMY+BES09JXAnyrZalI+YQ:S4+L1ldehsMYod+X3oI+YQ

Malware Config

Targets

    • Target

      d6cd8e671a13fb06cb19c6d3d816d27f_JaffaCakes118

    • Size

      120KB

    • MD5

      d6cd8e671a13fb06cb19c6d3d816d27f

    • SHA1

      5eaab949aa5afeb8311a68d58f0e911905fcb49e

    • SHA256

      610325c96cffc00d183884a88b9ce181b875c3267c491195650304b1fface787

    • SHA512

      8aa01d5812319a5cb2b878b39642534790ac1e909d2b8a3ed1d03daf8a11e7208a82cacb8b6f983ac76a2b632ed6096b24007c4fe4646ffadc072eb65e1e0292

    • SSDEEP

      3072:S4+L1lde8yfkMY+BES09JXAnyrZalI+YQ:S4+L1ldehsMYod+X3oI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Ramnit family

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks