General

  • Target

    6be309114073efdfaa4584e208312cb5_JaffaCakes118

  • Size

    129KB

  • Sample

    240523-w88fmacb32

  • MD5

    6be309114073efdfaa4584e208312cb5

  • SHA1

    3457d5eab4f0d8aa2327a424d14b235b1d218e7e

  • SHA256

    6089796f866772004b8cc090f07e2debc25ff2d3b627ea3708a43e4781317e32

  • SHA512

    1a4c4bbeb9ff36ab4b0e5c4e00a04a80149b5139b07a81b60ba599c05579e2c60ef9aa335608e4c0dc3b1fd8827141f55b0af4c8c02de224a7aa524ff6a26d9e

  • SSDEEP

    1536:STvbWcM1DgtqyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusG:ShMegyfkMY+BES09JXAnyrZalI+YU

Malware Config

Targets

    • Target

      6be309114073efdfaa4584e208312cb5_JaffaCakes118

    • Size

      129KB

    • MD5

      6be309114073efdfaa4584e208312cb5

    • SHA1

      3457d5eab4f0d8aa2327a424d14b235b1d218e7e

    • SHA256

      6089796f866772004b8cc090f07e2debc25ff2d3b627ea3708a43e4781317e32

    • SHA512

      1a4c4bbeb9ff36ab4b0e5c4e00a04a80149b5139b07a81b60ba599c05579e2c60ef9aa335608e4c0dc3b1fd8827141f55b0af4c8c02de224a7aa524ff6a26d9e

    • SSDEEP

      1536:STvbWcM1DgtqyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusG:ShMegyfkMY+BES09JXAnyrZalI+YU

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks