General

  • Target

    JaffaCakes118_01afbc75bbd100b6e856376b56d195e3

  • Size

    230KB

  • Sample

    250121-dtyzjatlgk

  • MD5

    01afbc75bbd100b6e856376b56d195e3

  • SHA1

    d46e2461fe343246efcf249f022100fd8b8874ff

  • SHA256

    15eabef86eb6810f08b2d2bc304cb53101bfb90b51a0c77cd69292235654f4c4

  • SHA512

    39b330313dc942f783346dffcff294ab73f6fc39528336fa54405a7215f66993012418adcd3d6f6ae64a1a62006829d720cc91dc933b37fdaf6cdd6ec5b6c921

  • SSDEEP

    6144:phta5vRFaiyUglpVanTWe3OSSuApN4obaa:ftKvbaiyD0qe+SSjYa

Malware Config

Targets

    • Target

      JaffaCakes118_01afbc75bbd100b6e856376b56d195e3

    • Size

      230KB

    • MD5

      01afbc75bbd100b6e856376b56d195e3

    • SHA1

      d46e2461fe343246efcf249f022100fd8b8874ff

    • SHA256

      15eabef86eb6810f08b2d2bc304cb53101bfb90b51a0c77cd69292235654f4c4

    • SHA512

      39b330313dc942f783346dffcff294ab73f6fc39528336fa54405a7215f66993012418adcd3d6f6ae64a1a62006829d720cc91dc933b37fdaf6cdd6ec5b6c921

    • SSDEEP

      6144:phta5vRFaiyUglpVanTWe3OSSuApN4obaa:ftKvbaiyD0qe+SSjYa

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Ramnit family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks