General

  • Target

    04c13a91ad98db8f09312c710fecc1e5_JaffaCakes118

  • Size

    158KB

  • Sample

    240428-j5pg5abe62

  • MD5

    04c13a91ad98db8f09312c710fecc1e5

  • SHA1

    704d4387bc9f54e7c0deca96a599cd4b8b664db9

  • SHA256

    c52e3bac5799ce142d4b6801455f4b6555a35108042d10f8dde86e2b4690765d

  • SHA512

    e897d5c2410a608542ccac3747fa58c349bce6221cdf0e689f6a128abb6fbe6d61f8a4a3f4367d35bee8cbf6bb81adccc94621acf3f0490b6dc589491979f94c

  • SSDEEP

    1536:iIRT0YfVi8iUoe0yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJA:iCU00yfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      04c13a91ad98db8f09312c710fecc1e5_JaffaCakes118

    • Size

      158KB

    • MD5

      04c13a91ad98db8f09312c710fecc1e5

    • SHA1

      704d4387bc9f54e7c0deca96a599cd4b8b664db9

    • SHA256

      c52e3bac5799ce142d4b6801455f4b6555a35108042d10f8dde86e2b4690765d

    • SHA512

      e897d5c2410a608542ccac3747fa58c349bce6221cdf0e689f6a128abb6fbe6d61f8a4a3f4367d35bee8cbf6bb81adccc94621acf3f0490b6dc589491979f94c

    • SSDEEP

      1536:iIRT0YfVi8iUoe0yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJA:iCU00yfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks