General

  • Target

    68cd18128a4945b3714f81bbe13f5a58_JaffaCakes118

  • Size

    120KB

  • Sample

    240522-11ewkaag63

  • MD5

    68cd18128a4945b3714f81bbe13f5a58

  • SHA1

    8969fdcfa79a39f1b014668b738d0b33a6828889

  • SHA256

    5e6a12542389e38831809b2353966b70bc83c2789bfc2d8fe21861889451b199

  • SHA512

    4fbb36e6a0cf71e8f178072fd0a3c8be63ca50fdef25fa81c7b6119b9838401d34ecee898445353b877dfc1bbecc7070df9d60503d8e5242dd3fd0bddc7ae4ec

  • SSDEEP

    1536:SszkTyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGL:SqGyfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      68cd18128a4945b3714f81bbe13f5a58_JaffaCakes118

    • Size

      120KB

    • MD5

      68cd18128a4945b3714f81bbe13f5a58

    • SHA1

      8969fdcfa79a39f1b014668b738d0b33a6828889

    • SHA256

      5e6a12542389e38831809b2353966b70bc83c2789bfc2d8fe21861889451b199

    • SHA512

      4fbb36e6a0cf71e8f178072fd0a3c8be63ca50fdef25fa81c7b6119b9838401d34ecee898445353b877dfc1bbecc7070df9d60503d8e5242dd3fd0bddc7ae4ec

    • SSDEEP

      1536:SszkTyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGL:SqGyfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks