General

  • Target

    67361ec529cec103385781fea40f4a08_JaffaCakes118

  • Size

    184KB

  • Sample

    240522-pahc8agh36

  • MD5

    67361ec529cec103385781fea40f4a08

  • SHA1

    5159aa1af5333e67b6b28f5d8e5f2f07fcb29aa3

  • SHA256

    a717d787bc2b35c121b15f19859ccd7452da655e76df6404cd3b646e137a5ec1

  • SHA512

    8b1d4e858c9e3aeb700ae79d059386b250cb52d034516e3039ad6748a0fce907cb0a22ef93e08806678db8042ed099fc2a13373c54060618ce4626f30d1b2080

  • SSDEEP

    3072:a1YryfkMY+BES09JXAnyrZalI+Y5N86QwUdedbFilfO5YFis:aaOsMYod+X3oI+Yn86/U9jFis

Malware Config

Targets

    • Target

      67361ec529cec103385781fea40f4a08_JaffaCakes118

    • Size

      184KB

    • MD5

      67361ec529cec103385781fea40f4a08

    • SHA1

      5159aa1af5333e67b6b28f5d8e5f2f07fcb29aa3

    • SHA256

      a717d787bc2b35c121b15f19859ccd7452da655e76df6404cd3b646e137a5ec1

    • SHA512

      8b1d4e858c9e3aeb700ae79d059386b250cb52d034516e3039ad6748a0fce907cb0a22ef93e08806678db8042ed099fc2a13373c54060618ce4626f30d1b2080

    • SSDEEP

      3072:a1YryfkMY+BES09JXAnyrZalI+Y5N86QwUdedbFilfO5YFis:aaOsMYod+X3oI+Yn86/U9jFis

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks