General

  • Target

    JaffaCakes118_6fe18320028abd1d52a642aba5985201

  • Size

    332KB

  • Sample

    250103-1frpmavkat

  • MD5

    6fe18320028abd1d52a642aba5985201

  • SHA1

    b1a22135f1fa45dca1c63275ffdffdcd502efc98

  • SHA256

    fee1b824e6c9a245cb4ddf32bdc5368f1486f750971f9d73af5b43a1e5a42223

  • SHA512

    f4bcad6acb82edf584b224fb7e5fab0390d08471dec56af1536e3468c60b2838617cbb07553474e0dab8486d2e714b8dfd14f04c6e46776f7c60674ee88548d7

  • SSDEEP

    6144:B7dHCc/ASsad1rasdUVUpLVLBsJ0uol9wnR:B7oc/2QraZiLZBsJSvOR

Malware Config

Targets

    • Target

      JaffaCakes118_6fe18320028abd1d52a642aba5985201

    • Size

      332KB

    • MD5

      6fe18320028abd1d52a642aba5985201

    • SHA1

      b1a22135f1fa45dca1c63275ffdffdcd502efc98

    • SHA256

      fee1b824e6c9a245cb4ddf32bdc5368f1486f750971f9d73af5b43a1e5a42223

    • SHA512

      f4bcad6acb82edf584b224fb7e5fab0390d08471dec56af1536e3468c60b2838617cbb07553474e0dab8486d2e714b8dfd14f04c6e46776f7c60674ee88548d7

    • SSDEEP

      6144:B7dHCc/ASsad1rasdUVUpLVLBsJ0uol9wnR:B7oc/2QraZiLZBsJSvOR

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Ramnit family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks