General

  • Target

    63a226b3a8ef642c526a52a18a3dd1fe_JaffaCakes118

  • Size

    158KB

  • Sample

    240521-rw77wahd4z

  • MD5

    63a226b3a8ef642c526a52a18a3dd1fe

  • SHA1

    8978c45d4408ac110d45b38af7afa5bbbe446195

  • SHA256

    f689562b3e2cbc3311e2d271dfbdc9e01d1181fc482ba311309936f59733f397

  • SHA512

    af725c436b2330e713432cb8b31c28d6ce93d164a8fe632a5aa4673dd84bddabc939eb82a451e68ab3520c43abb631351a1dff187c9e3daf5257812091a50a69

  • SSDEEP

    1536:iGRTuCR8ZN5b0lM/yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3om:isEH0lM/yfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      63a226b3a8ef642c526a52a18a3dd1fe_JaffaCakes118

    • Size

      158KB

    • MD5

      63a226b3a8ef642c526a52a18a3dd1fe

    • SHA1

      8978c45d4408ac110d45b38af7afa5bbbe446195

    • SHA256

      f689562b3e2cbc3311e2d271dfbdc9e01d1181fc482ba311309936f59733f397

    • SHA512

      af725c436b2330e713432cb8b31c28d6ce93d164a8fe632a5aa4673dd84bddabc939eb82a451e68ab3520c43abb631351a1dff187c9e3daf5257812091a50a69

    • SSDEEP

      1536:iGRTuCR8ZN5b0lM/yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3om:isEH0lM/yfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks