General

  • Target

    68d010feb538ed989ac58991c1e4bbee_JaffaCakes118

  • Size

    483KB

  • Sample

    240522-13sv7sah39

  • MD5

    68d010feb538ed989ac58991c1e4bbee

  • SHA1

    5049f2f09107c399907afe1172c809b0ef8b1fd3

  • SHA256

    175a875bc81320085f9c66ff62b00514e4a8ef5d3572516bbf99ffeb1de13e46

  • SHA512

    3ca7953ed6690bc551a6207e7b17a89361627f0c3eda895649b4f1c0e31f4d6c31167d90957eecadba633ced655f15c91280c6215d0d6352cf70f92c110f0e3f

  • SSDEEP

    6144:SKdsMYod+X3oI+Y6tvu6xAmzM86P5sZpMFzBtug4r1GcFBU/b:7p5d+X3poCPuzmrugwG2qz

Malware Config

Targets

    • Target

      68d010feb538ed989ac58991c1e4bbee_JaffaCakes118

    • Size

      483KB

    • MD5

      68d010feb538ed989ac58991c1e4bbee

    • SHA1

      5049f2f09107c399907afe1172c809b0ef8b1fd3

    • SHA256

      175a875bc81320085f9c66ff62b00514e4a8ef5d3572516bbf99ffeb1de13e46

    • SHA512

      3ca7953ed6690bc551a6207e7b17a89361627f0c3eda895649b4f1c0e31f4d6c31167d90957eecadba633ced655f15c91280c6215d0d6352cf70f92c110f0e3f

    • SSDEEP

      6144:SKdsMYod+X3oI+Y6tvu6xAmzM86P5sZpMFzBtug4r1GcFBU/b:7p5d+X3poCPuzmrugwG2qz

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks