General

  • Target

    6b0105dce7e36385e5cdd86b34371c84_JaffaCakes118

  • Size

    160KB

  • Sample

    240523-p4r5hsba4z

  • MD5

    6b0105dce7e36385e5cdd86b34371c84

  • SHA1

    3158027ba00489a32f099652984fbb41e7424a05

  • SHA256

    5b4a839123e2163052acb0817ef3624041269397d1c18e3d9475cb1916617c26

  • SHA512

    a2246a4038b508793c4a80878e1eed4ef4bd92670cc77315ffe9174af7363086d088c04588121b335fd0c67da8153ce33943e2799f16438a882f15c23a04c4ed

  • SSDEEP

    1536:iCRTUXt7z+6lFDyAyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3om:iQel2AyfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      6b0105dce7e36385e5cdd86b34371c84_JaffaCakes118

    • Size

      160KB

    • MD5

      6b0105dce7e36385e5cdd86b34371c84

    • SHA1

      3158027ba00489a32f099652984fbb41e7424a05

    • SHA256

      5b4a839123e2163052acb0817ef3624041269397d1c18e3d9475cb1916617c26

    • SHA512

      a2246a4038b508793c4a80878e1eed4ef4bd92670cc77315ffe9174af7363086d088c04588121b335fd0c67da8153ce33943e2799f16438a882f15c23a04c4ed

    • SSDEEP

      1536:iCRTUXt7z+6lFDyAyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3om:iQel2AyfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks