General

  • Target

    0032849d7bc94780bf3d9780a833ebaa_JaffaCakes118

  • Size

    155KB

  • Sample

    240426-hcxscsah79

  • MD5

    0032849d7bc94780bf3d9780a833ebaa

  • SHA1

    6e597709f60ebaf9319a63a424bdcd259d42e409

  • SHA256

    8d9dc10d82204593f6eff7e98510f0a86154a0b3f495f71efed7ecf01af802d2

  • SHA512

    f7d894a48267e41c1373af84a81bdf109f412ac126156c3653b84315b0a002e7627c736e2ba72df05cc81a37774c165ee0f577a0156cd7407e8c3bff3d1aedf7

  • SSDEEP

    1536:iERTz7FpGekotyLyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJA:i2GekLyfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      0032849d7bc94780bf3d9780a833ebaa_JaffaCakes118

    • Size

      155KB

    • MD5

      0032849d7bc94780bf3d9780a833ebaa

    • SHA1

      6e597709f60ebaf9319a63a424bdcd259d42e409

    • SHA256

      8d9dc10d82204593f6eff7e98510f0a86154a0b3f495f71efed7ecf01af802d2

    • SHA512

      f7d894a48267e41c1373af84a81bdf109f412ac126156c3653b84315b0a002e7627c736e2ba72df05cc81a37774c165ee0f577a0156cd7407e8c3bff3d1aedf7

    • SSDEEP

      1536:iERTz7FpGekotyLyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJA:i2GekLyfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks