General

  • Target

    69f9392426c3fa18eb35fa860aaebfe0_JaffaCakes118

  • Size

    128KB

  • Sample

    240523-grysjafh26

  • MD5

    69f9392426c3fa18eb35fa860aaebfe0

  • SHA1

    cc8207b136c1290d97658982beb0eaa794f222a0

  • SHA256

    e922d0d517eb2a5737a4fbe8bc7204244b633145e90571eadc025c5d62f52b23

  • SHA512

    2ec50b98625b046ec62575b7c876c891634410d4e95a47f1819740e30876606e161f851f437f03ebe822c47c83325c3a5d4676fa8af03edcc815845e245fa72a

  • SSDEEP

    1536:SQEnupfoyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy+:SV4wyfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      69f9392426c3fa18eb35fa860aaebfe0_JaffaCakes118

    • Size

      128KB

    • MD5

      69f9392426c3fa18eb35fa860aaebfe0

    • SHA1

      cc8207b136c1290d97658982beb0eaa794f222a0

    • SHA256

      e922d0d517eb2a5737a4fbe8bc7204244b633145e90571eadc025c5d62f52b23

    • SHA512

      2ec50b98625b046ec62575b7c876c891634410d4e95a47f1819740e30876606e161f851f437f03ebe822c47c83325c3a5d4676fa8af03edcc815845e245fa72a

    • SSDEEP

      1536:SQEnupfoyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy+:SV4wyfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks