General

  • Target

    68540bc81369a43dc0b62b693ea2339c_JaffaCakes118

  • Size

    158KB

  • Sample

    240522-xzjatadd72

  • MD5

    68540bc81369a43dc0b62b693ea2339c

  • SHA1

    d6059324b1236190b938fbe08eb26597e5161651

  • SHA256

    a67101cf89a565259dc3cdc865ec68844cc1173ac970f4fa961351ddbb3672d6

  • SHA512

    8808d82ddc12ac262f56ff1c0a967824391f22d20a746e409d27e77ffc13e553370f1e4359a3730fe6a1bf46390fa0988bcb8b67c449e2d402fa9813d8a163ca

  • SSDEEP

    1536:iSRT4CcEn8kDFEMms8yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXAZ:igbvbms8yfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      68540bc81369a43dc0b62b693ea2339c_JaffaCakes118

    • Size

      158KB

    • MD5

      68540bc81369a43dc0b62b693ea2339c

    • SHA1

      d6059324b1236190b938fbe08eb26597e5161651

    • SHA256

      a67101cf89a565259dc3cdc865ec68844cc1173ac970f4fa961351ddbb3672d6

    • SHA512

      8808d82ddc12ac262f56ff1c0a967824391f22d20a746e409d27e77ffc13e553370f1e4359a3730fe6a1bf46390fa0988bcb8b67c449e2d402fa9813d8a163ca

    • SSDEEP

      1536:iSRT4CcEn8kDFEMms8yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXAZ:igbvbms8yfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks