General

  • Target

    6cc78b43a778335c0fcf2c90ca35bd9f_JaffaCakes118

  • Size

    177KB

  • Sample

    240524-arzaqsef6t

  • MD5

    6cc78b43a778335c0fcf2c90ca35bd9f

  • SHA1

    374658fb1ca2aa56852a8b91538d2ad60eaceaf0

  • SHA256

    d8f7c2ed84d1ed0ce259fd977cdf950265b20403a2c3a2cc8021f85c399c86d2

  • SHA512

    189c8254fe386935e1eca7e52e83442dbc3156676faf68d5b281399eb4bc582b0d3d7523eeba1621a98501a44c2fdfed09fab6e167229f31a5b33bdf6f56d789

  • SSDEEP

    3072:SOxMyfkMY+BES09JXAnyrZalI+Y5N86QwUdedbFilfO5YFiM:SWsMYod+X3oI+Yn86/U9jFiM

Malware Config

Targets

    • Target

      6cc78b43a778335c0fcf2c90ca35bd9f_JaffaCakes118

    • Size

      177KB

    • MD5

      6cc78b43a778335c0fcf2c90ca35bd9f

    • SHA1

      374658fb1ca2aa56852a8b91538d2ad60eaceaf0

    • SHA256

      d8f7c2ed84d1ed0ce259fd977cdf950265b20403a2c3a2cc8021f85c399c86d2

    • SHA512

      189c8254fe386935e1eca7e52e83442dbc3156676faf68d5b281399eb4bc582b0d3d7523eeba1621a98501a44c2fdfed09fab6e167229f31a5b33bdf6f56d789

    • SSDEEP

      3072:SOxMyfkMY+BES09JXAnyrZalI+Y5N86QwUdedbFilfO5YFiM:SWsMYod+X3oI+Yn86/U9jFiM

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks