General

  • Target

    6fed960d4924230291a81179cbc77e23_JaffaCakes118

  • Size

    158KB

  • Sample

    240524-1w9v5sch54

  • MD5

    6fed960d4924230291a81179cbc77e23

  • SHA1

    e60bc2debaf46f43e12e93d2d1ff3ab7410a22d6

  • SHA256

    2c5ceac48fa40005a570b6615cd442ea2ec41257dd4e912b1b5e865741d21e72

  • SHA512

    8174894fdb23fa39d5d04ca3be4c9cefd8979fe6a98eb7fc711ffe4e6556954c26d989035c305ddded3e6ad4de56e15784241edf5e96487a41047849e15686f8

  • SSDEEP

    1536:itRTyuJsP6E5/6C9P/r+yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09wee:iL3CtD+yfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      6fed960d4924230291a81179cbc77e23_JaffaCakes118

    • Size

      158KB

    • MD5

      6fed960d4924230291a81179cbc77e23

    • SHA1

      e60bc2debaf46f43e12e93d2d1ff3ab7410a22d6

    • SHA256

      2c5ceac48fa40005a570b6615cd442ea2ec41257dd4e912b1b5e865741d21e72

    • SHA512

      8174894fdb23fa39d5d04ca3be4c9cefd8979fe6a98eb7fc711ffe4e6556954c26d989035c305ddded3e6ad4de56e15784241edf5e96487a41047849e15686f8

    • SSDEEP

      1536:itRTyuJsP6E5/6C9P/r+yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09wee:iL3CtD+yfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks