General

  • Target

    674dfb6e1714bcf1a707e0a6a3851df5_JaffaCakes118

  • Size

    156KB

  • Sample

    240522-pzhehsbg59

  • MD5

    674dfb6e1714bcf1a707e0a6a3851df5

  • SHA1

    ee749155541fda7754b6a0c816893ba4a4be46db

  • SHA256

    5107842a44a4579ee62e75c80e9cd249a465f4b321954388fb18ff42d64a8ab1

  • SHA512

    8b398122c3d7b531030d8a91303fed19f0493f5451f5a51d896406358edce43ec8ff83a5934696a4f115d38a3db48bd92c10b2e783181717e49c829fc8a937a0

  • SSDEEP

    1536:itRTDY4Kf+qKtjI8yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3om:iLD8pKu8yfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      674dfb6e1714bcf1a707e0a6a3851df5_JaffaCakes118

    • Size

      156KB

    • MD5

      674dfb6e1714bcf1a707e0a6a3851df5

    • SHA1

      ee749155541fda7754b6a0c816893ba4a4be46db

    • SHA256

      5107842a44a4579ee62e75c80e9cd249a465f4b321954388fb18ff42d64a8ab1

    • SHA512

      8b398122c3d7b531030d8a91303fed19f0493f5451f5a51d896406358edce43ec8ff83a5934696a4f115d38a3db48bd92c10b2e783181717e49c829fc8a937a0

    • SSDEEP

      1536:itRTDY4Kf+qKtjI8yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3om:iLD8pKu8yfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks