General

  • Target

    04dd3256ee2274b3b19b2e44c814054a_JaffaCakes118

  • Size

    351KB

  • Sample

    240428-lajphace39

  • MD5

    04dd3256ee2274b3b19b2e44c814054a

  • SHA1

    63321dd87d9ceabd85b3844fc6ff8f06acbd2e70

  • SHA256

    19cea394801a7aa778bbd24d7cdbcb7e7b428c33e6e7371ded19d5f631ef2914

  • SHA512

    8c8fabee28db87ded99136430b84b2d4c69dda790422e743b1b2941e9848ab514a5fa3283b58fd32da0fee92ddcda2cdd3a46f51d4a126569df95ba4711f8955

  • SSDEEP

    6144:SVbib6JcauFM2eoe10H+9sMYod+X3oI+YRGDe1sMYod+X3oI+YRGDev:ubib6JcauFM2eoe10H+J5d+X3vGDG5d2

Malware Config

Targets

    • Target

      04dd3256ee2274b3b19b2e44c814054a_JaffaCakes118

    • Size

      351KB

    • MD5

      04dd3256ee2274b3b19b2e44c814054a

    • SHA1

      63321dd87d9ceabd85b3844fc6ff8f06acbd2e70

    • SHA256

      19cea394801a7aa778bbd24d7cdbcb7e7b428c33e6e7371ded19d5f631ef2914

    • SHA512

      8c8fabee28db87ded99136430b84b2d4c69dda790422e743b1b2941e9848ab514a5fa3283b58fd32da0fee92ddcda2cdd3a46f51d4a126569df95ba4711f8955

    • SSDEEP

      6144:SVbib6JcauFM2eoe10H+9sMYod+X3oI+YRGDe1sMYod+X3oI+YRGDev:ubib6JcauFM2eoe10H+J5d+X3vGDG5d2

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks