General

  • Target

    03fb8fe500e987c86deb6ffa6ddba81d_JaffaCakes118

  • Size

    157KB

  • Sample

    240428-atq25sca25

  • MD5

    03fb8fe500e987c86deb6ffa6ddba81d

  • SHA1

    dc36cd09896f07f46694149b157b2b13f2f4cfa9

  • SHA256

    0c59b38fe1791bdd2c5bfb415096f4c3d4cd7b9b62fb0c9f3dab2bc7b0001cc5

  • SHA512

    16745fe8bcaad76e415f5edf67c3f43c95afcac84186366d5810be2fe83ee9427e08773f9a9b2fdb6e6ea160bb1fd58bcfca24923a1d7161f7afea9b26def88a

  • SSDEEP

    1536:iORT5kYxRb+yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBw:iEnV+yfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      03fb8fe500e987c86deb6ffa6ddba81d_JaffaCakes118

    • Size

      157KB

    • MD5

      03fb8fe500e987c86deb6ffa6ddba81d

    • SHA1

      dc36cd09896f07f46694149b157b2b13f2f4cfa9

    • SHA256

      0c59b38fe1791bdd2c5bfb415096f4c3d4cd7b9b62fb0c9f3dab2bc7b0001cc5

    • SHA512

      16745fe8bcaad76e415f5edf67c3f43c95afcac84186366d5810be2fe83ee9427e08773f9a9b2fdb6e6ea160bb1fd58bcfca24923a1d7161f7afea9b26def88a

    • SSDEEP

      1536:iORT5kYxRb+yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBw:iEnV+yfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks