General

  • Target

    057e81b516b5180cb6a66bb26a807b26_JaffaCakes118

  • Size

    158KB

  • Sample

    240428-ss2flaba41

  • MD5

    057e81b516b5180cb6a66bb26a807b26

  • SHA1

    c4d6fb066ee9012a8982669b9352047075daff09

  • SHA256

    435f0d14e6fd5c01abf7ffc831737555fdc1944935d75441f7e46093e7f77e32

  • SHA512

    86063daa5fa73f89c817bddd879466935d71df50adcada2579c172823e4ed903049f7a0370b0f18ba22ec85bad0d4d80d3f2f9af10551d656b3f6bb9e874d4b3

  • SSDEEP

    1536:iKRTxl8XaU14yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusG:iIYaU6yfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      057e81b516b5180cb6a66bb26a807b26_JaffaCakes118

    • Size

      158KB

    • MD5

      057e81b516b5180cb6a66bb26a807b26

    • SHA1

      c4d6fb066ee9012a8982669b9352047075daff09

    • SHA256

      435f0d14e6fd5c01abf7ffc831737555fdc1944935d75441f7e46093e7f77e32

    • SHA512

      86063daa5fa73f89c817bddd879466935d71df50adcada2579c172823e4ed903049f7a0370b0f18ba22ec85bad0d4d80d3f2f9af10551d656b3f6bb9e874d4b3

    • SSDEEP

      1536:iKRTxl8XaU14yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusG:iIYaU6yfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks