General

  • Target

    68425752b1fb35356f9eae4d2c3c6237_JaffaCakes118

  • Size

    170KB

  • Sample

    240522-xgdydacf89

  • MD5

    68425752b1fb35356f9eae4d2c3c6237

  • SHA1

    8f5e14c571f0eed36b68bbee414a1ec6a0c8a185

  • SHA256

    1214de6e0db23e9f34adaa3627c55729a5fe4350aa894ff1ab000759bbc16dc9

  • SHA512

    f1fe427a0b4fbc52c0a76cd197547f75c575a0a616d06954896f8929845521e4c6883dbb2fd824a3fc7878965b8e4232bcbe800af6a3df1837530f2583631af8

  • SSDEEP

    3072:nl6yaW/sVy74xOjyfkMY+BES09JXAnyrZalI+YQ:nl6pW/sVy74xOGsMYod+X3oI+YQ

Malware Config

Targets

    • Target

      68425752b1fb35356f9eae4d2c3c6237_JaffaCakes118

    • Size

      170KB

    • MD5

      68425752b1fb35356f9eae4d2c3c6237

    • SHA1

      8f5e14c571f0eed36b68bbee414a1ec6a0c8a185

    • SHA256

      1214de6e0db23e9f34adaa3627c55729a5fe4350aa894ff1ab000759bbc16dc9

    • SHA512

      f1fe427a0b4fbc52c0a76cd197547f75c575a0a616d06954896f8929845521e4c6883dbb2fd824a3fc7878965b8e4232bcbe800af6a3df1837530f2583631af8

    • SSDEEP

      3072:nl6yaW/sVy74xOjyfkMY+BES09JXAnyrZalI+YQ:nl6pW/sVy74xOGsMYod+X3oI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks