General

  • Target

    04144a0706b78a632b81b8fe9351e999_JaffaCakes118

  • Size

    141KB

  • Sample

    240428-bx9jbsdb38

  • MD5

    04144a0706b78a632b81b8fe9351e999

  • SHA1

    578afbb87154bc6929864d06c6bdc3dd454d23c6

  • SHA256

    f2ad07964c0f8eee199b7c7095bfba1c0a74f17d2061003e32d70f20b1c8bf1b

  • SHA512

    d5f5da00f6e2e9f43ce52872f43755432d98b1db50d0b31be664c0beceb59fac561f360249ad95420c7a1188d9c6ae5c75341710efbe934543f2716fe1ba10d8

  • SSDEEP

    1536:ScTS0oFKg6pV/gPgvgHg7gm2gmmgTgngbgmNgLgz4N+yLi+rffMxqNisaQx4V5ro:SHFFByfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      04144a0706b78a632b81b8fe9351e999_JaffaCakes118

    • Size

      141KB

    • MD5

      04144a0706b78a632b81b8fe9351e999

    • SHA1

      578afbb87154bc6929864d06c6bdc3dd454d23c6

    • SHA256

      f2ad07964c0f8eee199b7c7095bfba1c0a74f17d2061003e32d70f20b1c8bf1b

    • SHA512

      d5f5da00f6e2e9f43ce52872f43755432d98b1db50d0b31be664c0beceb59fac561f360249ad95420c7a1188d9c6ae5c75341710efbe934543f2716fe1ba10d8

    • SSDEEP

      1536:ScTS0oFKg6pV/gPgvgHg7gm2gmmgTgngbgmNgLgz4N+yLi+rffMxqNisaQx4V5ro:SHFFByfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks