General

  • Target

    04899cbbd30f5ef5f3a5aa75d60f88d4_JaffaCakes118

  • Size

    182KB

  • Sample

    240428-gv6bsahf86

  • MD5

    04899cbbd30f5ef5f3a5aa75d60f88d4

  • SHA1

    3a2b622a2507917b19e274dc659f025936e12f68

  • SHA256

    4a33503158395b90a8321f491d877c437f2709b8b210fedf4436848fa019ed42

  • SHA512

    f39ca425c7590ff720b432f852a4cbd1bcd96c0e9633e2d5a233cde2770c2905e3d0dae650842f2f82ac44d6c599a0e31262348a70ed49981ba458bce4d96636

  • SSDEEP

    3072:x/ihSyfkMY+BES09JXAnyrZalI+Y5N86QwUdedbFilfO5YFiM:x0XsMYod+X3oI+Yn86/U9jFiM

Malware Config

Targets

    • Target

      04899cbbd30f5ef5f3a5aa75d60f88d4_JaffaCakes118

    • Size

      182KB

    • MD5

      04899cbbd30f5ef5f3a5aa75d60f88d4

    • SHA1

      3a2b622a2507917b19e274dc659f025936e12f68

    • SHA256

      4a33503158395b90a8321f491d877c437f2709b8b210fedf4436848fa019ed42

    • SHA512

      f39ca425c7590ff720b432f852a4cbd1bcd96c0e9633e2d5a233cde2770c2905e3d0dae650842f2f82ac44d6c599a0e31262348a70ed49981ba458bce4d96636

    • SSDEEP

      3072:x/ihSyfkMY+BES09JXAnyrZalI+Y5N86QwUdedbFilfO5YFiM:x0XsMYod+X3oI+Yn86/U9jFiM

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks