General

  • Target

    68b57c5a32e630b8fadbb7a4f175197c_JaffaCakes118

  • Size

    515KB

  • Sample

    240522-1ed25shf85

  • MD5

    68b57c5a32e630b8fadbb7a4f175197c

  • SHA1

    f0b498b0d95a52a8f57ecc20382e27a6608797c1

  • SHA256

    8898d7372bc012b6a3217bfca0c9aee4382251a906cd1aa3d1ea166b55774f21

  • SHA512

    f01de1f4076776a9dec1dfbe11c9088bf165ff887081f5dacf9f1bc31b2b2a7b1f6c4429118f5b4c35c89112bd6b3f55c0542f91a394688f9ae64c93d2443f39

  • SSDEEP

    6144:SsbsMYod+X3oI+Y6tvu6xAmzM86P5sZpMFzBtug4r1GcFBU/b:rv5d+X3poCPuzmrugwG2qz

Malware Config

Targets

    • Target

      68b57c5a32e630b8fadbb7a4f175197c_JaffaCakes118

    • Size

      515KB

    • MD5

      68b57c5a32e630b8fadbb7a4f175197c

    • SHA1

      f0b498b0d95a52a8f57ecc20382e27a6608797c1

    • SHA256

      8898d7372bc012b6a3217bfca0c9aee4382251a906cd1aa3d1ea166b55774f21

    • SHA512

      f01de1f4076776a9dec1dfbe11c9088bf165ff887081f5dacf9f1bc31b2b2a7b1f6c4429118f5b4c35c89112bd6b3f55c0542f91a394688f9ae64c93d2443f39

    • SSDEEP

      6144:SsbsMYod+X3oI+Y6tvu6xAmzM86P5sZpMFzBtug4r1GcFBU/b:rv5d+X3poCPuzmrugwG2qz

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks