General

  • Target

    056d33f9647560e8db04db164d5419da_JaffaCakes118

  • Size

    158KB

  • Sample

    240428-r4457aad4x

  • MD5

    056d33f9647560e8db04db164d5419da

  • SHA1

    0f00176bf7b1d49c717ce0c438fffaba27d15ae6

  • SHA256

    42923666f50a9c8eb9b4a535f6b151e6e6d12d6ec6a399fe088aa5d91fb41807

  • SHA512

    6bf24ec4b88a87d676dfbfee9b0c2800ccfa0d89daee5a0b6b4a9cf3c7182492ece095fda4b2beb5e3d64f58e58395c4ac9361206f65ff6cc35838623cac940d

  • SSDEEP

    1536:iuRTc3NPD2cninFWyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3om:ikDOqWyfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      056d33f9647560e8db04db164d5419da_JaffaCakes118

    • Size

      158KB

    • MD5

      056d33f9647560e8db04db164d5419da

    • SHA1

      0f00176bf7b1d49c717ce0c438fffaba27d15ae6

    • SHA256

      42923666f50a9c8eb9b4a535f6b151e6e6d12d6ec6a399fe088aa5d91fb41807

    • SHA512

      6bf24ec4b88a87d676dfbfee9b0c2800ccfa0d89daee5a0b6b4a9cf3c7182492ece095fda4b2beb5e3d64f58e58395c4ac9361206f65ff6cc35838623cac940d

    • SSDEEP

      1536:iuRTc3NPD2cninFWyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3om:ikDOqWyfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks