General

  • Target

    04a78755d5519c29366307d409c192bb_JaffaCakes118

  • Size

    356KB

  • Sample

    240428-h3rzssah7x

  • MD5

    04a78755d5519c29366307d409c192bb

  • SHA1

    04b5686a9cddda208a0831503cc92eff3bf2ee8c

  • SHA256

    671636a1aef0943ef25fdfd74266b20717141708615407cd6ae0b5ef151006a5

  • SHA512

    c5bc2f8ac7d5b9ffb244c7852c49627462ff8b29af4f4fde31936e747e51ac2636bf23c2869dbba144ded4c980d07a5b382a291ffa62cf41e5b62f936e0c4a9d

  • SSDEEP

    6144:SKsMYod+X3oI+YlRCzsMYod+X3oI+YcsMYod+X3oI+YQ:f5d+X3X0H5d+X345d+X3+

Malware Config

Targets

    • Target

      04a78755d5519c29366307d409c192bb_JaffaCakes118

    • Size

      356KB

    • MD5

      04a78755d5519c29366307d409c192bb

    • SHA1

      04b5686a9cddda208a0831503cc92eff3bf2ee8c

    • SHA256

      671636a1aef0943ef25fdfd74266b20717141708615407cd6ae0b5ef151006a5

    • SHA512

      c5bc2f8ac7d5b9ffb244c7852c49627462ff8b29af4f4fde31936e747e51ac2636bf23c2869dbba144ded4c980d07a5b382a291ffa62cf41e5b62f936e0c4a9d

    • SSDEEP

      6144:SKsMYod+X3oI+YlRCzsMYod+X3oI+YcsMYod+X3oI+YQ:f5d+X3X0H5d+X345d+X3+

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks