General

  • Target

    67dded47cc6d9ffdeb02e315db3d86d2_JaffaCakes118

  • Size

    112KB

  • Sample

    240522-tr34gagh7y

  • MD5

    67dded47cc6d9ffdeb02e315db3d86d2

  • SHA1

    b08f0e3469a27fb3569d3f8430ad6c2c531d9c7d

  • SHA256

    aab7873db1b93ee0b4a4e5dab0512e5bd7d16034f6dafecbebe1d9f60c6d76cb

  • SHA512

    98f5f6435cb5543d3292a9eb99ef4902fb059d4c2df4195065d457904a6285d11c3bb5aa519b4fc5a6a8ebe5c7449c11722e909bd48af751a838e267f18ce3df

  • SSDEEP

    1536:SByLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGCsQy:SByfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      67dded47cc6d9ffdeb02e315db3d86d2_JaffaCakes118

    • Size

      112KB

    • MD5

      67dded47cc6d9ffdeb02e315db3d86d2

    • SHA1

      b08f0e3469a27fb3569d3f8430ad6c2c531d9c7d

    • SHA256

      aab7873db1b93ee0b4a4e5dab0512e5bd7d16034f6dafecbebe1d9f60c6d76cb

    • SHA512

      98f5f6435cb5543d3292a9eb99ef4902fb059d4c2df4195065d457904a6285d11c3bb5aa519b4fc5a6a8ebe5c7449c11722e909bd48af751a838e267f18ce3df

    • SSDEEP

      1536:SByLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGCsQy:SByfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks