General

  • Target

    6982397c77054983adaf5b2992107268_JaffaCakes118

  • Size

    133KB

  • Sample

    240523-ddzk5abc91

  • MD5

    6982397c77054983adaf5b2992107268

  • SHA1

    4dff8049f9abe14c2c9198a76b7c4e6223483c79

  • SHA256

    afcf66ac173f1fb5259637cd89ee932e67ba5747c682d5ae79b34f82cd7b439a

  • SHA512

    44322b5dcbd3d35ac4f86007dbd2d7039fb49c04ffe5fd97f0653b6ee9de278353e4d4db518b6f31fb868220c2629eebf6112210a8d8e1863c6a1d2f0506bb84

  • SSDEEP

    1536:OMgqf8BJ3NuvCVok97o0LXQNebU38yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76L:OhyfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      6982397c77054983adaf5b2992107268_JaffaCakes118

    • Size

      133KB

    • MD5

      6982397c77054983adaf5b2992107268

    • SHA1

      4dff8049f9abe14c2c9198a76b7c4e6223483c79

    • SHA256

      afcf66ac173f1fb5259637cd89ee932e67ba5747c682d5ae79b34f82cd7b439a

    • SHA512

      44322b5dcbd3d35ac4f86007dbd2d7039fb49c04ffe5fd97f0653b6ee9de278353e4d4db518b6f31fb868220c2629eebf6112210a8d8e1863c6a1d2f0506bb84

    • SSDEEP

      1536:OMgqf8BJ3NuvCVok97o0LXQNebU38yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76L:OhyfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks