General

  • Target

    6a734e6f57cdd1d7e17b32dc5e1ce6c7_JaffaCakes118

  • Size

    364KB

  • Sample

    240523-k6tnxabf6s

  • MD5

    6a734e6f57cdd1d7e17b32dc5e1ce6c7

  • SHA1

    dd5c3752442f88673d45e4c140c109087f4ee730

  • SHA256

    d56bee7ef39df1f62c292a734164a3f31fe8558972bd1b1d55cd53e93356ebf2

  • SHA512

    a9a40b5377c4946c66adce1ad3cdb825c43e7fe615a598a5d8cc503952225c9e78d488d4747f2a5a18e42555b5a0d9b5ca59fa3594bda91b7d302928d6b494dd

  • SSDEEP

    6144:SqsMYod+X3oI+YYWrvUj6/sMYod+X3oI+YcsMYod+X3oI+YQ:75d+X32GUj6D5d+X345d+X3+

Malware Config

Targets

    • Target

      6a734e6f57cdd1d7e17b32dc5e1ce6c7_JaffaCakes118

    • Size

      364KB

    • MD5

      6a734e6f57cdd1d7e17b32dc5e1ce6c7

    • SHA1

      dd5c3752442f88673d45e4c140c109087f4ee730

    • SHA256

      d56bee7ef39df1f62c292a734164a3f31fe8558972bd1b1d55cd53e93356ebf2

    • SHA512

      a9a40b5377c4946c66adce1ad3cdb825c43e7fe615a598a5d8cc503952225c9e78d488d4747f2a5a18e42555b5a0d9b5ca59fa3594bda91b7d302928d6b494dd

    • SSDEEP

      6144:SqsMYod+X3oI+YYWrvUj6/sMYod+X3oI+YcsMYod+X3oI+YQ:75d+X32GUj6D5d+X345d+X3+

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks