General

  • Target

    0290b8aa5db3c3bba54529ad4d8795aa_JaffaCakes118

  • Size

    241KB

  • Sample

    240427-gj8yjace28

  • MD5

    0290b8aa5db3c3bba54529ad4d8795aa

  • SHA1

    42519220b1695afcf8f7be4d75aa42126761f45e

  • SHA256

    8aa91d82e7479cf305d0c9edc3a2ae5e6f535904f80c33e56abc0df6c8e9ab09

  • SHA512

    d186c016bdd678e035e48ac15cf450c6d96f8f82aa5635115b4510e46cf643a66f57fa7981c5634661ab5bc67bfa860e89008090f1dc81fc8209c6a392bee566

  • SSDEEP

    3072:S3aIrMsyfkMY+BES09JXAnyrZalI+YFyfkMY+BES09JXAnyrZalI+YQ:SKIARsMYod+X3oI+YwsMYod+X3oI+YQ

Malware Config

Targets

    • Target

      0290b8aa5db3c3bba54529ad4d8795aa_JaffaCakes118

    • Size

      241KB

    • MD5

      0290b8aa5db3c3bba54529ad4d8795aa

    • SHA1

      42519220b1695afcf8f7be4d75aa42126761f45e

    • SHA256

      8aa91d82e7479cf305d0c9edc3a2ae5e6f535904f80c33e56abc0df6c8e9ab09

    • SHA512

      d186c016bdd678e035e48ac15cf450c6d96f8f82aa5635115b4510e46cf643a66f57fa7981c5634661ab5bc67bfa860e89008090f1dc81fc8209c6a392bee566

    • SSDEEP

      3072:S3aIrMsyfkMY+BES09JXAnyrZalI+YFyfkMY+BES09JXAnyrZalI+YQ:SKIARsMYod+X3oI+YwsMYod+X3oI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks