General

  • Target

    68450269f70e6e1e8886f8214e41fe12_JaffaCakes118

  • Size

    155KB

  • Sample

    240522-xj1j6acg93

  • MD5

    68450269f70e6e1e8886f8214e41fe12

  • SHA1

    b8f64e8532dba271bba18858ad3e894c1a3773c5

  • SHA256

    db5a8cced37d8c56cc9e2c5c918b678a5327b98259e09347ac50626ce7ce56e1

  • SHA512

    c9d61bd197ddeb19beea0d36c73af73fd3544189f67da34ac411934de2054333c84ef5ec3639586b23abea2cf19731ac62c646d761b6993d861c98daede2cddc

  • SSDEEP

    1536:iFRT1QbMNYnyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBw:izxNYnyfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      68450269f70e6e1e8886f8214e41fe12_JaffaCakes118

    • Size

      155KB

    • MD5

      68450269f70e6e1e8886f8214e41fe12

    • SHA1

      b8f64e8532dba271bba18858ad3e894c1a3773c5

    • SHA256

      db5a8cced37d8c56cc9e2c5c918b678a5327b98259e09347ac50626ce7ce56e1

    • SHA512

      c9d61bd197ddeb19beea0d36c73af73fd3544189f67da34ac411934de2054333c84ef5ec3639586b23abea2cf19731ac62c646d761b6993d861c98daede2cddc

    • SSDEEP

      1536:iFRT1QbMNYnyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBw:izxNYnyfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks