General

  • Target

    00f39adc9cf8fb93b5fa11d27c3eaa06_JaffaCakes118

  • Size

    160KB

  • Sample

    240426-rky5tsea9t

  • MD5

    00f39adc9cf8fb93b5fa11d27c3eaa06

  • SHA1

    934e533332fc6242f0e3b8565b4e1f7c6bf84dc4

  • SHA256

    b6226c72e2762e4e409269378e31a20252841435fd86257a1f496d3f66c9d1bf

  • SHA512

    3373f7b11090acdc1066daa0f4b786a2aa017c961f42bbd41701e5d49c6acbb3a3070c87cba55ddeff738c6b69611784fb868defb57c3c760347daafcb3dff6a

  • SSDEEP

    1536:i9RTSZ/OnKFmb0kvuyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3p:ibPbYkvuyfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      00f39adc9cf8fb93b5fa11d27c3eaa06_JaffaCakes118

    • Size

      160KB

    • MD5

      00f39adc9cf8fb93b5fa11d27c3eaa06

    • SHA1

      934e533332fc6242f0e3b8565b4e1f7c6bf84dc4

    • SHA256

      b6226c72e2762e4e409269378e31a20252841435fd86257a1f496d3f66c9d1bf

    • SHA512

      3373f7b11090acdc1066daa0f4b786a2aa017c961f42bbd41701e5d49c6acbb3a3070c87cba55ddeff738c6b69611784fb868defb57c3c760347daafcb3dff6a

    • SSDEEP

      1536:i9RTSZ/OnKFmb0kvuyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3p:ibPbYkvuyfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks