General

  • Target

    04fba1e4b624febf941c0a8ad5d7b8df_JaffaCakes118

  • Size

    175KB

  • Sample

    240428-mg8smsdh71

  • MD5

    04fba1e4b624febf941c0a8ad5d7b8df

  • SHA1

    609231aa992590c521887d271d708bcf45a90ec3

  • SHA256

    d1d4e384ac15d03448614534dfe46158dc5533fabb11354438fcd6018c591e58

  • SHA512

    9bca90b2fe83f0119ba88659a6ca65049ea34b6ba9504e5a4e0b1fa5a99cc593cb211893bbcdf788485f1aaab2ed8b4183c184e9f5daef4867e046480636d7f9

  • SSDEEP

    3072:SOeJyfkMY+BES09JXAnyrZalI+Y5N86QwUdedbFilfO5YFiM:SOessMYod+X3oI+Yn86/U9jFiM

Malware Config

Targets

    • Target

      04fba1e4b624febf941c0a8ad5d7b8df_JaffaCakes118

    • Size

      175KB

    • MD5

      04fba1e4b624febf941c0a8ad5d7b8df

    • SHA1

      609231aa992590c521887d271d708bcf45a90ec3

    • SHA256

      d1d4e384ac15d03448614534dfe46158dc5533fabb11354438fcd6018c591e58

    • SHA512

      9bca90b2fe83f0119ba88659a6ca65049ea34b6ba9504e5a4e0b1fa5a99cc593cb211893bbcdf788485f1aaab2ed8b4183c184e9f5daef4867e046480636d7f9

    • SSDEEP

      3072:SOeJyfkMY+BES09JXAnyrZalI+Y5N86QwUdedbFilfO5YFiM:SOessMYod+X3oI+Yn86/U9jFiM

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks