General

  • Target

    faab06618fc87f23b885b763cdce7a09_JaffaCakes118

  • Size

    159KB

  • Sample

    241218-jjkxta1mdk

  • MD5

    faab06618fc87f23b885b763cdce7a09

  • SHA1

    64135aeb77800c6fbdf24b36d27422a42d90f3a1

  • SHA256

    645b42539d1fe7255742fb92673f1d4de322c0a2be270a89890f624915cd4407

  • SHA512

    3b2d228cc492ed6168af512e08253416d82b812a17f6252d5d836a3eea1241bf2aa7279d42482ac3f67033f25bc5c17793c02adbfc7bc1f66e69d54b2b574b32

  • SSDEEP

    3072:iFkLnJbLHSXyfkMY+BES09JXAnyrZalI+YQ:iSLJbLHSisMYod+X3oI+YQ

Malware Config

Targets

    • Target

      faab06618fc87f23b885b763cdce7a09_JaffaCakes118

    • Size

      159KB

    • MD5

      faab06618fc87f23b885b763cdce7a09

    • SHA1

      64135aeb77800c6fbdf24b36d27422a42d90f3a1

    • SHA256

      645b42539d1fe7255742fb92673f1d4de322c0a2be270a89890f624915cd4407

    • SHA512

      3b2d228cc492ed6168af512e08253416d82b812a17f6252d5d836a3eea1241bf2aa7279d42482ac3f67033f25bc5c17793c02adbfc7bc1f66e69d54b2b574b32

    • SSDEEP

      3072:iFkLnJbLHSXyfkMY+BES09JXAnyrZalI+YQ:iSLJbLHSisMYod+X3oI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Ramnit family

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks