General

  • Target

    02a2c345d0fae100b39cbebd20cae086_JaffaCakes118

  • Size

    347KB

  • Sample

    240427-habr4sda65

  • MD5

    02a2c345d0fae100b39cbebd20cae086

  • SHA1

    b88d1c79afab3c176b18a1297340c2808e8d0df1

  • SHA256

    e22b07dac666a2e6c9609cb28b66875c1ea421c8c150a736e2c3fa25b30cc18d

  • SHA512

    c28a31b3a154e4548ce1e94a0e4451c5b314b5e58d697eef83d7dbfdd925443448c255ed755a905d0607de2e705233952b496f11d90897baadea2ff753d85004

  • SSDEEP

    6144:O9sMYod+X3oI+YODeBTesMYod+X3oI+Y5sMYod+X3oI+YQ:OJ5d+X3IDe65d+X3f5d+X3+

Malware Config

Targets

    • Target

      02a2c345d0fae100b39cbebd20cae086_JaffaCakes118

    • Size

      347KB

    • MD5

      02a2c345d0fae100b39cbebd20cae086

    • SHA1

      b88d1c79afab3c176b18a1297340c2808e8d0df1

    • SHA256

      e22b07dac666a2e6c9609cb28b66875c1ea421c8c150a736e2c3fa25b30cc18d

    • SHA512

      c28a31b3a154e4548ce1e94a0e4451c5b314b5e58d697eef83d7dbfdd925443448c255ed755a905d0607de2e705233952b496f11d90897baadea2ff753d85004

    • SSDEEP

      6144:O9sMYod+X3oI+YODeBTesMYod+X3oI+Y5sMYod+X3oI+YQ:OJ5d+X3IDe65d+X3f5d+X3+

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks