General

  • Target

    04de9fa6547de9db78c6d9fcfce80ca8_JaffaCakes118

  • Size

    151KB

  • Sample

    240428-lc1e2acg6x

  • MD5

    04de9fa6547de9db78c6d9fcfce80ca8

  • SHA1

    523f3fd5a2f9feaab48cd6a55c25f3036003c960

  • SHA256

    496be2cf79106cdb9d1ed58255703c10f00fa0fc96a4a0d6aaa80d2af1823623

  • SHA512

    da4b3886afb709c21b2d2080ca313450d33ec171a2b52b05364ea978454f2ea5946c4b4f73c1146cf90bf5f13f53908e301057f8f2ff0bcdca3110a30cc44119

  • SSDEEP

    1536:igRT8bCO+7ayLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBw:iKq2ayfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      04de9fa6547de9db78c6d9fcfce80ca8_JaffaCakes118

    • Size

      151KB

    • MD5

      04de9fa6547de9db78c6d9fcfce80ca8

    • SHA1

      523f3fd5a2f9feaab48cd6a55c25f3036003c960

    • SHA256

      496be2cf79106cdb9d1ed58255703c10f00fa0fc96a4a0d6aaa80d2af1823623

    • SHA512

      da4b3886afb709c21b2d2080ca313450d33ec171a2b52b05364ea978454f2ea5946c4b4f73c1146cf90bf5f13f53908e301057f8f2ff0bcdca3110a30cc44119

    • SSDEEP

      1536:igRT8bCO+7ayLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBw:iKq2ayfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks