General

  • Target

    002a9ee2e83b117607d84180f63e21dd_JaffaCakes118

  • Size

    159KB

  • Sample

    240425-1w8m3sfg29

  • MD5

    002a9ee2e83b117607d84180f63e21dd

  • SHA1

    25122a7b2407fa595c83d4216bae2b3980cd5160

  • SHA256

    d52d09ff762be9c6d95a34c6a3ae40e6cddf3a72a714c22f30c38601ec46a7d4

  • SHA512

    4e4a9d6e954f4f14134e9c698314f1bb9fe8e4e3ee9591ef68d01ec4b2f97184ffb1ef47ecb201ad6daec3cdf8df84d6890183ae41ff98997abb1144d8a8ca62

  • SSDEEP

    1536:iTRT+cy70KuyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBw:i9guyfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      002a9ee2e83b117607d84180f63e21dd_JaffaCakes118

    • Size

      159KB

    • MD5

      002a9ee2e83b117607d84180f63e21dd

    • SHA1

      25122a7b2407fa595c83d4216bae2b3980cd5160

    • SHA256

      d52d09ff762be9c6d95a34c6a3ae40e6cddf3a72a714c22f30c38601ec46a7d4

    • SHA512

      4e4a9d6e954f4f14134e9c698314f1bb9fe8e4e3ee9591ef68d01ec4b2f97184ffb1ef47ecb201ad6daec3cdf8df84d6890183ae41ff98997abb1144d8a8ca62

    • SSDEEP

      1536:iTRT+cy70KuyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBw:i9guyfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks