General

  • Target

    6a5690ecc9e723372df140d4ba65ed05_JaffaCakes118

  • Size

    155KB

  • Sample

    240523-kb1tqsag4z

  • MD5

    6a5690ecc9e723372df140d4ba65ed05

  • SHA1

    3b4f13a0b45517b717ce7a2750716510414ab842

  • SHA256

    86706e6495d628b7cea97c3b71f37fadcf5a18d91da7257eb2c9560975ab6846

  • SHA512

    a2d613bcf96d03edd4bc8d921f6937952cec81023c31bf040552a9099e0a93623d911471cd20d7cf7dcd4a3d62ccbfb5e384263295c391e01e4edbc7d5510c95

  • SSDEEP

    1536:iaRTK8PXVL0IzyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJruH:iY/zyfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      6a5690ecc9e723372df140d4ba65ed05_JaffaCakes118

    • Size

      155KB

    • MD5

      6a5690ecc9e723372df140d4ba65ed05

    • SHA1

      3b4f13a0b45517b717ce7a2750716510414ab842

    • SHA256

      86706e6495d628b7cea97c3b71f37fadcf5a18d91da7257eb2c9560975ab6846

    • SHA512

      a2d613bcf96d03edd4bc8d921f6937952cec81023c31bf040552a9099e0a93623d911471cd20d7cf7dcd4a3d62ccbfb5e384263295c391e01e4edbc7d5510c95

    • SSDEEP

      1536:iaRTK8PXVL0IzyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJruH:iY/zyfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks