General

  • Target

    ffbaf94f7a63fa678b54e0357bae1353_JaffaCakes118

  • Size

    179KB

  • Sample

    240421-t9qk4afd37

  • MD5

    ffbaf94f7a63fa678b54e0357bae1353

  • SHA1

    27c32d46178df22de3b12850a98b63516f7f48c0

  • SHA256

    d58fe382725e79666dbab581e56906e1f40286c18f2943bd2c52d8ae10089b42

  • SHA512

    97b079e8bf164dd4b1b44bdf2fff91d7b1a40af376d7cc5551ff690835edbd082ea7207e613ebc0d95f91dae53be2badf3429278a25971a549bb4311ea4bf953

  • SSDEEP

    3072:SxyfkMY+BES09JXAnyrZalI+Y5N86QwUdedbFilfO5YFiM:S0sMYod+X3oI+Yn86/U9jFiM

Malware Config

Targets

    • Target

      ffbaf94f7a63fa678b54e0357bae1353_JaffaCakes118

    • Size

      179KB

    • MD5

      ffbaf94f7a63fa678b54e0357bae1353

    • SHA1

      27c32d46178df22de3b12850a98b63516f7f48c0

    • SHA256

      d58fe382725e79666dbab581e56906e1f40286c18f2943bd2c52d8ae10089b42

    • SHA512

      97b079e8bf164dd4b1b44bdf2fff91d7b1a40af376d7cc5551ff690835edbd082ea7207e613ebc0d95f91dae53be2badf3429278a25971a549bb4311ea4bf953

    • SSDEEP

      3072:SxyfkMY+BES09JXAnyrZalI+Y5N86QwUdedbFilfO5YFiM:S0sMYod+X3oI+Yn86/U9jFiM

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks