General

  • Target

    6730b5c1a4cca5431cf80ecf8288f5a3_JaffaCakes118

  • Size

    124KB

  • Sample

    240522-n5x7gsfh56

  • MD5

    6730b5c1a4cca5431cf80ecf8288f5a3

  • SHA1

    659f6c8004d99b678b83409627877d1e4e78c934

  • SHA256

    e9d9627b0a31964d1bb29dc6a8339bb7b8979b5d0f69f02968afce3b16205af7

  • SHA512

    9bcad7d6108370b33b17650b91efaef15fc858e4c1367d85a87320ba738bfab7a9decf9f34b1fb93dbb9641146e2c01af9e46e7fa4c4d346a19f1e0bcb60d6e0

  • SSDEEP

    1536:SjyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGCsQy:SjyfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      6730b5c1a4cca5431cf80ecf8288f5a3_JaffaCakes118

    • Size

      124KB

    • MD5

      6730b5c1a4cca5431cf80ecf8288f5a3

    • SHA1

      659f6c8004d99b678b83409627877d1e4e78c934

    • SHA256

      e9d9627b0a31964d1bb29dc6a8339bb7b8979b5d0f69f02968afce3b16205af7

    • SHA512

      9bcad7d6108370b33b17650b91efaef15fc858e4c1367d85a87320ba738bfab7a9decf9f34b1fb93dbb9641146e2c01af9e46e7fa4c4d346a19f1e0bcb60d6e0

    • SSDEEP

      1536:SjyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGCsQy:SjyfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks