General

  • Target

    05be5928bfc7a7b931c4ebb83c21c623_JaffaCakes118

  • Size

    243KB

  • Sample

    240428-wd6njsdd7y

  • MD5

    05be5928bfc7a7b931c4ebb83c21c623

  • SHA1

    dffd9d1a103b7830cac8c4fcb75568ca3670bf91

  • SHA256

    bbcf88e5fe1e67ebc53eeddc9df9e5bc412072facc3883b8702215244a351a80

  • SHA512

    def2f01fb0b513030c282f5b6b89a4d66986274e3ba4bac831cc5ba569dff58005f6ebce22728819fc60acdc0aa79759e88994e546113a2c976da74565349a4d

  • SSDEEP

    3072:SgoKxpryfkMY+BES09JXAnyrZalI+Ycm4N4fAyfkMY+BES09JXAnyrZalI+Yhi:SgJCsMYod+X3oI+YjsMYod+X3oI+Yhi

Malware Config

Targets

    • Target

      05be5928bfc7a7b931c4ebb83c21c623_JaffaCakes118

    • Size

      243KB

    • MD5

      05be5928bfc7a7b931c4ebb83c21c623

    • SHA1

      dffd9d1a103b7830cac8c4fcb75568ca3670bf91

    • SHA256

      bbcf88e5fe1e67ebc53eeddc9df9e5bc412072facc3883b8702215244a351a80

    • SHA512

      def2f01fb0b513030c282f5b6b89a4d66986274e3ba4bac831cc5ba569dff58005f6ebce22728819fc60acdc0aa79759e88994e546113a2c976da74565349a4d

    • SSDEEP

      3072:SgoKxpryfkMY+BES09JXAnyrZalI+Ycm4N4fAyfkMY+BES09JXAnyrZalI+Yhi:SgJCsMYod+X3oI+YjsMYod+X3oI+Yhi

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks