General

  • Target

    6943cb6e4a99b7d4e5b79c97e9f1a0e5_JaffaCakes118

  • Size

    130KB

  • Sample

    240523-bp1w8agc41

  • MD5

    6943cb6e4a99b7d4e5b79c97e9f1a0e5

  • SHA1

    3a8e5f1baff2dd1ff9de453dce65a689d5bfa6a4

  • SHA256

    7234db5e809ca33502c44fa965c2594391638bf8eb26fcf01cd0a14fa225f85a

  • SHA512

    9269466fd203f05cc6a68cabe9373b7fa5ee941fdfdc113173fe25c5c08a18404379c9b96496ae5ca7037f98378c84ffbbe0ada0f6f1990db6df12c126fe88a6

  • SSDEEP

    1536:1HchmcmilyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOZ:1Hch5milyfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      6943cb6e4a99b7d4e5b79c97e9f1a0e5_JaffaCakes118

    • Size

      130KB

    • MD5

      6943cb6e4a99b7d4e5b79c97e9f1a0e5

    • SHA1

      3a8e5f1baff2dd1ff9de453dce65a689d5bfa6a4

    • SHA256

      7234db5e809ca33502c44fa965c2594391638bf8eb26fcf01cd0a14fa225f85a

    • SHA512

      9269466fd203f05cc6a68cabe9373b7fa5ee941fdfdc113173fe25c5c08a18404379c9b96496ae5ca7037f98378c84ffbbe0ada0f6f1990db6df12c126fe88a6

    • SSDEEP

      1536:1HchmcmilyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOZ:1Hch5milyfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks