General

  • Target

    698a6007c26d0c5b3ab8dc7a3c3906a3_JaffaCakes118

  • Size

    176KB

  • Sample

    240523-dmm9fsbf71

  • MD5

    698a6007c26d0c5b3ab8dc7a3c3906a3

  • SHA1

    0b55436da9e23a13e529ae9feaa543875e8f385b

  • SHA256

    c9c4dcc6930049c40bf3691962effd72213029a33d6ab0aaceaf83b2edcf4677

  • SHA512

    c27cd5ea3607ac7f5ae626e1ee9cfc00924d19c4b6d2e683a68adf085be7d1c4f5f594da4849d44a872e3e493b733cf8b5b9d259d16aebdd58fc0ecf5dfc5543

  • SSDEEP

    3072:SrV+yfkMY+BES09JXAnyrZalI+Y5N86QwUdedbFilfO5YFiM:SZbsMYod+X3oI+Yn86/U9jFiM

Malware Config

Targets

    • Target

      698a6007c26d0c5b3ab8dc7a3c3906a3_JaffaCakes118

    • Size

      176KB

    • MD5

      698a6007c26d0c5b3ab8dc7a3c3906a3

    • SHA1

      0b55436da9e23a13e529ae9feaa543875e8f385b

    • SHA256

      c9c4dcc6930049c40bf3691962effd72213029a33d6ab0aaceaf83b2edcf4677

    • SHA512

      c27cd5ea3607ac7f5ae626e1ee9cfc00924d19c4b6d2e683a68adf085be7d1c4f5f594da4849d44a872e3e493b733cf8b5b9d259d16aebdd58fc0ecf5dfc5543

    • SSDEEP

      3072:SrV+yfkMY+BES09JXAnyrZalI+Y5N86QwUdedbFilfO5YFiM:SZbsMYod+X3oI+Yn86/U9jFiM

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks