General

  • Target

    029f3b0128ca5defa20f1de9b3dcc43c_JaffaCakes118

  • Size

    185KB

  • Sample

    240427-g49essch67

  • MD5

    029f3b0128ca5defa20f1de9b3dcc43c

  • SHA1

    2ded7b4e2918abaa8ad7582e138541926c87d7aa

  • SHA256

    28ea2406a67c58a82d58c3f4f7b4bc29f26d4a921bf0ded9c8985ee04c9c3d46

  • SHA512

    6b19f9bb27ba14263e5ecd0c7e4a837f986f2c98ba8cc77dd3d1e059ef0b4182eafaec88113a50dd7f29d46165338845b648505410573d5187eab028e27eb06e

  • SSDEEP

    3072:lK1TyfkMY+BES09JXAnyrZalI+Y5N86QwUdedbFilfO5YFis:7sMYod+X3oI+Yn86/U9jFis

Malware Config

Targets

    • Target

      029f3b0128ca5defa20f1de9b3dcc43c_JaffaCakes118

    • Size

      185KB

    • MD5

      029f3b0128ca5defa20f1de9b3dcc43c

    • SHA1

      2ded7b4e2918abaa8ad7582e138541926c87d7aa

    • SHA256

      28ea2406a67c58a82d58c3f4f7b4bc29f26d4a921bf0ded9c8985ee04c9c3d46

    • SHA512

      6b19f9bb27ba14263e5ecd0c7e4a837f986f2c98ba8cc77dd3d1e059ef0b4182eafaec88113a50dd7f29d46165338845b648505410573d5187eab028e27eb06e

    • SSDEEP

      3072:lK1TyfkMY+BES09JXAnyrZalI+Y5N86QwUdedbFilfO5YFis:7sMYod+X3oI+Yn86/U9jFis

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks