General

  • Target

    02fa0f6714ef2db8517f0c3e5b640919_JaffaCakes118

  • Size

    473KB

  • Sample

    240427-ltke5sgf7x

  • MD5

    02fa0f6714ef2db8517f0c3e5b640919

  • SHA1

    80b0a1b07e013d08c56b1ff5534e1426b17be708

  • SHA256

    5993ee8e888602b19fce888633325f0294bb19a48c5eb8fb91579371b180c70e

  • SHA512

    570dd52f782e9a7f0a7af5eca28ff7074adb885485caf21cee625a6ec95156e5bcc6c2c5ca733f4d8d85f59609d7904245cc966da127c84a1a3c1440e010a9fc

  • SSDEEP

    6144:SksMYod+X3oI+Yb29sMYod+X3oI+YJKsMYod+X3oI+YLsMYod+X3oI+YT:d5d+X3x2J5d+X3zo5d+X315d+X3R

Malware Config

Targets

    • Target

      02fa0f6714ef2db8517f0c3e5b640919_JaffaCakes118

    • Size

      473KB

    • MD5

      02fa0f6714ef2db8517f0c3e5b640919

    • SHA1

      80b0a1b07e013d08c56b1ff5534e1426b17be708

    • SHA256

      5993ee8e888602b19fce888633325f0294bb19a48c5eb8fb91579371b180c70e

    • SHA512

      570dd52f782e9a7f0a7af5eca28ff7074adb885485caf21cee625a6ec95156e5bcc6c2c5ca733f4d8d85f59609d7904245cc966da127c84a1a3c1440e010a9fc

    • SSDEEP

      6144:SksMYod+X3oI+Yb29sMYod+X3oI+YJKsMYod+X3oI+YLsMYod+X3oI+YT:d5d+X3x2J5d+X3zo5d+X315d+X3R

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks