General

  • Target

    6a731d3e47acbd9f0c27727bd752b6f3_JaffaCakes118

  • Size

    134KB

  • Sample

    240523-k6nsnabf83

  • MD5

    6a731d3e47acbd9f0c27727bd752b6f3

  • SHA1

    ed2b939a69c7ec29021102eff9d6bfc059e88f3d

  • SHA256

    b5d8bcf4fd668712eaeed19f4aaa307d74aac4a69ae6534e437952c528737e54

  • SHA512

    07c20ced7ccf40b9a6cc2565a46b449b28ca1391fe2e9321a6fa4d1c2d05bd648f17e3639f5ba325dc06528ba10585ebb3d022a4d9519dfc05259b3f426a1640

  • SSDEEP

    3072:S/ig2Vk229kb28ko2Ykg2Vkb2rk62xkq2Gkq2ikm2nkW2Lkk2zkk27kk2ikk2ikF:Sb2Vk229kb28ko2Ykg2Vkb2rk62xkq2Z

Malware Config

Targets

    • Target

      6a731d3e47acbd9f0c27727bd752b6f3_JaffaCakes118

    • Size

      134KB

    • MD5

      6a731d3e47acbd9f0c27727bd752b6f3

    • SHA1

      ed2b939a69c7ec29021102eff9d6bfc059e88f3d

    • SHA256

      b5d8bcf4fd668712eaeed19f4aaa307d74aac4a69ae6534e437952c528737e54

    • SHA512

      07c20ced7ccf40b9a6cc2565a46b449b28ca1391fe2e9321a6fa4d1c2d05bd648f17e3639f5ba325dc06528ba10585ebb3d022a4d9519dfc05259b3f426a1640

    • SSDEEP

      3072:S/ig2Vk229kb28ko2Ykg2Vkb2rk62xkq2Gkq2ikm2nkW2Lkk2zkk27kk2ikk2ikF:Sb2Vk229kb28ko2Ykg2Vkb2rk62xkq2Z

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Tasks