General

  • Target

    6917ef6b42a6f956ad0e592e1fe25879_JaffaCakes118

  • Size

    211KB

  • Sample

    240523-ae7rcaed22

  • MD5

    6917ef6b42a6f956ad0e592e1fe25879

  • SHA1

    528464be169ff511ac95f7ed5599c7244d569e10

  • SHA256

    75559c020e3d8ae2e00413f5db44fa0eef6b1410e7bf4a73c2b941ec92d9bd6f

  • SHA512

    fcc22de6ba71e1b2820bb20165dbbf3c337418c144506728213d6c637a484b72591ce05f010bd616818eab86e6aa77b67315d3de79002645b10866de04ae50a6

  • SSDEEP

    3072:SSATAGAkocL+yfkMY+BES09JXAnyrZalI+Y5N86QwUdedbFilfO5YFiM:S+GAqsMYod+X3oI+Yn86/U9jFiM

Malware Config

Targets

    • Target

      6917ef6b42a6f956ad0e592e1fe25879_JaffaCakes118

    • Size

      211KB

    • MD5

      6917ef6b42a6f956ad0e592e1fe25879

    • SHA1

      528464be169ff511ac95f7ed5599c7244d569e10

    • SHA256

      75559c020e3d8ae2e00413f5db44fa0eef6b1410e7bf4a73c2b941ec92d9bd6f

    • SHA512

      fcc22de6ba71e1b2820bb20165dbbf3c337418c144506728213d6c637a484b72591ce05f010bd616818eab86e6aa77b67315d3de79002645b10866de04ae50a6

    • SSDEEP

      3072:SSATAGAkocL+yfkMY+BES09JXAnyrZalI+Y5N86QwUdedbFilfO5YFiM:S+GAqsMYod+X3oI+Yn86/U9jFiM

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks