General

  • Target

    00cfd9eb138b7e1f864e21e13b53fc35_JaffaCakes118

  • Size

    127KB

  • Sample

    240426-p4gnsacb32

  • MD5

    00cfd9eb138b7e1f864e21e13b53fc35

  • SHA1

    d0964968b26bdb5831fc60b39cefe15aa8cafb0c

  • SHA256

    4db2eb09d6c5b3ff0299ea615a12f5f6efabee9de433cbfabb67639737c27073

  • SHA512

    2552f07f6aa9ec6bc17915407a8ff35192413952a52422a726008a6e666053844ddef7cc4f7689bbaa27f94ceb7faf78e3993bc29dc0faea5614dc76099f4e07

  • SSDEEP

    1536:jzuYerk8yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy+:jzL8yfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      00cfd9eb138b7e1f864e21e13b53fc35_JaffaCakes118

    • Size

      127KB

    • MD5

      00cfd9eb138b7e1f864e21e13b53fc35

    • SHA1

      d0964968b26bdb5831fc60b39cefe15aa8cafb0c

    • SHA256

      4db2eb09d6c5b3ff0299ea615a12f5f6efabee9de433cbfabb67639737c27073

    • SHA512

      2552f07f6aa9ec6bc17915407a8ff35192413952a52422a726008a6e666053844ddef7cc4f7689bbaa27f94ceb7faf78e3993bc29dc0faea5614dc76099f4e07

    • SSDEEP

      1536:jzuYerk8yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy+:jzL8yfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks