General

  • Target

    69167bf41f2e8ea64a1fb649a55dc7c2_JaffaCakes118

  • Size

    219KB

  • Sample

    240523-advqdsec64

  • MD5

    69167bf41f2e8ea64a1fb649a55dc7c2

  • SHA1

    95ad174cd12f8bb934f761f5a201f626221bd7bb

  • SHA256

    e562ac9ec6102e61dc630dc98a5a169a14dec33e36fec4943a31daa631b2cb63

  • SHA512

    e5ee88b53e804d48dfab436e37bc027b356dbc587ffca2a3b3fa742fd5d0cfc6713b658511bd23173d8eeff90cc9278b73cf0241b86471dae492776fd5f73fb6

  • SSDEEP

    3072:SBU57f2yfkMY+BES09JXAnyrZalI+Y5N86QwUdedbFilfO5YFis:S2577sMYod+X3oI+Yn86/U9jFis

Malware Config

Targets

    • Target

      69167bf41f2e8ea64a1fb649a55dc7c2_JaffaCakes118

    • Size

      219KB

    • MD5

      69167bf41f2e8ea64a1fb649a55dc7c2

    • SHA1

      95ad174cd12f8bb934f761f5a201f626221bd7bb

    • SHA256

      e562ac9ec6102e61dc630dc98a5a169a14dec33e36fec4943a31daa631b2cb63

    • SHA512

      e5ee88b53e804d48dfab436e37bc027b356dbc587ffca2a3b3fa742fd5d0cfc6713b658511bd23173d8eeff90cc9278b73cf0241b86471dae492776fd5f73fb6

    • SSDEEP

      3072:SBU57f2yfkMY+BES09JXAnyrZalI+Y5N86QwUdedbFilfO5YFis:S2577sMYod+X3oI+Yn86/U9jFis

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks