General

  • Target

    00be61d2a1708a56bfb17680afb8f286_JaffaCakes118

  • Size

    347KB

  • Sample

    240426-pdh4xsbd74

  • MD5

    00be61d2a1708a56bfb17680afb8f286

  • SHA1

    8825db1536fb6dd91051bb6c30d3151659eeb03b

  • SHA256

    27adaaf1f2c56e606dd581c25c8182af90763905cda604d7f3ba0c32c219fa25

  • SHA512

    ff104f5dccbd6cb41e3a1f4194a123f27dff5829d7315b8ec2ccc163a028895a02a6388d67444fd6d4fb1de5ec79ff1fef22bb3613e2b47f03f83dc0838504b3

  • SSDEEP

    6144:eINsMYod+X3oI+Yu1DJsMYod+X3oI+Y5sMYod+X3oI+YQ:TZ5d+X365d+X3f5d+X3+

Malware Config

Targets

    • Target

      00be61d2a1708a56bfb17680afb8f286_JaffaCakes118

    • Size

      347KB

    • MD5

      00be61d2a1708a56bfb17680afb8f286

    • SHA1

      8825db1536fb6dd91051bb6c30d3151659eeb03b

    • SHA256

      27adaaf1f2c56e606dd581c25c8182af90763905cda604d7f3ba0c32c219fa25

    • SHA512

      ff104f5dccbd6cb41e3a1f4194a123f27dff5829d7315b8ec2ccc163a028895a02a6388d67444fd6d4fb1de5ec79ff1fef22bb3613e2b47f03f83dc0838504b3

    • SSDEEP

      6144:eINsMYod+X3oI+Yu1DJsMYod+X3oI+Y5sMYod+X3oI+YQ:TZ5d+X365d+X3f5d+X3+

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks