General

  • Target

    04629db1cd4a11aa00c8ada604598e86_JaffaCakes118

  • Size

    146KB

  • Sample

    240428-e7mn4agb68

  • MD5

    04629db1cd4a11aa00c8ada604598e86

  • SHA1

    5728cdb660170ab3ec7eff85a87459900b6c524f

  • SHA256

    7e57f282fd7fecf56920f966b5e8c5d88a487c25a726c438cb4c1e61d03e1024

  • SHA512

    881b4c6f6ab38a184e80e08c5ef454fe9159f542c8b0b48642ae73a7a6cc415ced4db0dd52e900e1c2e64dd308e41cbde55ed7a0214a811713fdcc2077b5993f

  • SSDEEP

    1536:xju63vdyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9w:xu6VyfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      04629db1cd4a11aa00c8ada604598e86_JaffaCakes118

    • Size

      146KB

    • MD5

      04629db1cd4a11aa00c8ada604598e86

    • SHA1

      5728cdb660170ab3ec7eff85a87459900b6c524f

    • SHA256

      7e57f282fd7fecf56920f966b5e8c5d88a487c25a726c438cb4c1e61d03e1024

    • SHA512

      881b4c6f6ab38a184e80e08c5ef454fe9159f542c8b0b48642ae73a7a6cc415ced4db0dd52e900e1c2e64dd308e41cbde55ed7a0214a811713fdcc2077b5993f

    • SSDEEP

      1536:xju63vdyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9w:xu6VyfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks