General

  • Target

    694d906639dae372d4e4d07af7eaef4d_JaffaCakes118

  • Size

    239KB

  • Sample

    240523-byyhfsha39

  • MD5

    694d906639dae372d4e4d07af7eaef4d

  • SHA1

    9b80a75b6d914f8793dc132f7a9f51f02b52c4dd

  • SHA256

    26da3082b5b4ec2adfc4d5d35bd233adb5fadda88a7e9cf26da8ffb78107b2d3

  • SHA512

    6701d7e8ebf1f29a448d3a067a72d8992f0a823975bfee7185b6aa56f3f471e8bc479c997d879c96626670c1f60a8fd2405b7c0b8a4548bb87632b30a7fe393c

  • SSDEEP

    3072:gWlyyfkMY+BES09JXAnyrZalI+Y4yfkMY+BES09JXAnyrZalI+Yp:fsMYod+X3oI+Y1sMYod+X3oI+Yp

Malware Config

Targets

    • Target

      694d906639dae372d4e4d07af7eaef4d_JaffaCakes118

    • Size

      239KB

    • MD5

      694d906639dae372d4e4d07af7eaef4d

    • SHA1

      9b80a75b6d914f8793dc132f7a9f51f02b52c4dd

    • SHA256

      26da3082b5b4ec2adfc4d5d35bd233adb5fadda88a7e9cf26da8ffb78107b2d3

    • SHA512

      6701d7e8ebf1f29a448d3a067a72d8992f0a823975bfee7185b6aa56f3f471e8bc479c997d879c96626670c1f60a8fd2405b7c0b8a4548bb87632b30a7fe393c

    • SSDEEP

      3072:gWlyyfkMY+BES09JXAnyrZalI+Y4yfkMY+BES09JXAnyrZalI+Yp:fsMYod+X3oI+Y1sMYod+X3oI+Yp

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks