General

  • Target

    028ad07374f9e09c2774035551e0d7ce_JaffaCakes118

  • Size

    234KB

  • Sample

    240427-gayffada3v

  • MD5

    028ad07374f9e09c2774035551e0d7ce

  • SHA1

    f40b0b506c08ce05d5bedb17d7f4221ea7223542

  • SHA256

    9c048734b86a394e24128d88cb231084185764fe74581a4e23d14d42ecf8d300

  • SHA512

    3da03d78b644d40ccea0ab7acc61ec745110e806330f04244fc4cb69e6e564cd4769328183a5ecca8d0dc8be7f5ced414efd5a5ba8a3f18294f3777290a48a3c

  • SSDEEP

    3072:DMTKyfkMY+BES09JXAnyrZalI+YuyfkMY+BES09JXAnyrZalI+YQ:DMbsMYod+X3oI+YLsMYod+X3oI+YQ

Malware Config

Targets

    • Target

      028ad07374f9e09c2774035551e0d7ce_JaffaCakes118

    • Size

      234KB

    • MD5

      028ad07374f9e09c2774035551e0d7ce

    • SHA1

      f40b0b506c08ce05d5bedb17d7f4221ea7223542

    • SHA256

      9c048734b86a394e24128d88cb231084185764fe74581a4e23d14d42ecf8d300

    • SHA512

      3da03d78b644d40ccea0ab7acc61ec745110e806330f04244fc4cb69e6e564cd4769328183a5ecca8d0dc8be7f5ced414efd5a5ba8a3f18294f3777290a48a3c

    • SSDEEP

      3072:DMTKyfkMY+BES09JXAnyrZalI+YuyfkMY+BES09JXAnyrZalI+YQ:DMbsMYod+X3oI+YLsMYod+X3oI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks