General

  • Target

    6a54f8c6f3270790defcf9fa5e127510_JaffaCakes118

  • Size

    189KB

  • Sample

    240523-kasfzaaf82

  • MD5

    6a54f8c6f3270790defcf9fa5e127510

  • SHA1

    54b73bd6bf3daecf1ea31e8a1635c8b87b72e45a

  • SHA256

    18f37d48ec3ae175e0a6144e0071e647490dd36fcd531dfb7b5912730de430ea

  • SHA512

    4691e3111a8841191dfaf3935cf4ff4e51bb99af0867db64def9cd0e740bced2f61b7fa23680168d87bb3cda77b8017578ff03a43fe79c107bf474f08a884e00

  • SSDEEP

    3072:SAuAPv4DegOqBVx9NC7QVgzq/3OyfkMY+BES09JXAnyrZalI+Y3ml8mKAF/kQkj0:Sz/rsMYod+X3oI+Y3xm8QkI

Malware Config

Targets

    • Target

      6a54f8c6f3270790defcf9fa5e127510_JaffaCakes118

    • Size

      189KB

    • MD5

      6a54f8c6f3270790defcf9fa5e127510

    • SHA1

      54b73bd6bf3daecf1ea31e8a1635c8b87b72e45a

    • SHA256

      18f37d48ec3ae175e0a6144e0071e647490dd36fcd531dfb7b5912730de430ea

    • SHA512

      4691e3111a8841191dfaf3935cf4ff4e51bb99af0867db64def9cd0e740bced2f61b7fa23680168d87bb3cda77b8017578ff03a43fe79c107bf474f08a884e00

    • SSDEEP

      3072:SAuAPv4DegOqBVx9NC7QVgzq/3OyfkMY+BES09JXAnyrZalI+Y3ml8mKAF/kQkj0:Sz/rsMYod+X3oI+Y3xm8QkI

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks