General

  • Target

    6a758650ff888841c6be3cf8f425bbab_JaffaCakes118

  • Size

    158KB

  • Sample

    240523-k8rmbsbg39

  • MD5

    6a758650ff888841c6be3cf8f425bbab

  • SHA1

    5636d9613852d371a37de1b4a2372d0c2c5069ac

  • SHA256

    646d06ecb5ee1474fba089b695f718296309f332ffc768187f6b3d53d4377535

  • SHA512

    c22d3bb6a19fed9007e489454fdfcb721d72268e17c22e7c2d7549fc827b5995ffbc579bf2039adf657a9e3207e915a2cf75c49deced283a167c1f188ec042c6

  • SSDEEP

    1536:iERTxFIoUKNqE+AbEsvyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXu:i2Y5svyfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      6a758650ff888841c6be3cf8f425bbab_JaffaCakes118

    • Size

      158KB

    • MD5

      6a758650ff888841c6be3cf8f425bbab

    • SHA1

      5636d9613852d371a37de1b4a2372d0c2c5069ac

    • SHA256

      646d06ecb5ee1474fba089b695f718296309f332ffc768187f6b3d53d4377535

    • SHA512

      c22d3bb6a19fed9007e489454fdfcb721d72268e17c22e7c2d7549fc827b5995ffbc579bf2039adf657a9e3207e915a2cf75c49deced283a167c1f188ec042c6

    • SSDEEP

      1536:iERTxFIoUKNqE+AbEsvyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXu:i2Y5svyfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks