General

  • Target

    02d25f028dc65218a7ae27d58ffa43dd_JaffaCakes118

  • Size

    227KB

  • Sample

    240427-kad9cafc81

  • MD5

    02d25f028dc65218a7ae27d58ffa43dd

  • SHA1

    49f00d436e120aa82fcb6fd00a95a24d0f8086e2

  • SHA256

    1a91b30a4fd36eb1217bd33b5954848972c02a374080f8757673a41ef7c4b15a

  • SHA512

    224e9848c9cb15291134b0d6f716b858ac077278718ba6c753db017b6d71761bccda6c1dfe154f55cfb8f2d16c0ab787b31e610ea694c69c71c53b46799c49cf

  • SSDEEP

    3072:SEZyfkMY+BES09JXAnyrZalI+YFyfkMY+BES09JXAnyrZalI+YQ:SHsMYod+X3oI+YwsMYod+X3oI+YQ

Malware Config

Targets

    • Target

      02d25f028dc65218a7ae27d58ffa43dd_JaffaCakes118

    • Size

      227KB

    • MD5

      02d25f028dc65218a7ae27d58ffa43dd

    • SHA1

      49f00d436e120aa82fcb6fd00a95a24d0f8086e2

    • SHA256

      1a91b30a4fd36eb1217bd33b5954848972c02a374080f8757673a41ef7c4b15a

    • SHA512

      224e9848c9cb15291134b0d6f716b858ac077278718ba6c753db017b6d71761bccda6c1dfe154f55cfb8f2d16c0ab787b31e610ea694c69c71c53b46799c49cf

    • SSDEEP

      3072:SEZyfkMY+BES09JXAnyrZalI+YFyfkMY+BES09JXAnyrZalI+YQ:SHsMYod+X3oI+YwsMYod+X3oI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks