General

  • Target

    6cdfecf2e95f08a27142b4601f9b1617_JaffaCakes118

  • Size

    133KB

  • Sample

    240524-bhytaafh53

  • MD5

    6cdfecf2e95f08a27142b4601f9b1617

  • SHA1

    f85dbcb5f31ac7064a5cd401bc300daa9bcf6121

  • SHA256

    0f6ab3e9a2309f8ba6e680424feaa6ebca8904e616655523230d7b25fad29c58

  • SHA512

    84f59cf893932b6de269b0a104de21cc7f0fa561509ab24b6be2a5738ea425d6f8da9248b8a4215611c73aba26165de6305abc53b94d4b8df7afb8d564bb4f72

  • SSDEEP

    1536:S6F6BcMAByLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOZ:S6FtMAByfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      6cdfecf2e95f08a27142b4601f9b1617_JaffaCakes118

    • Size

      133KB

    • MD5

      6cdfecf2e95f08a27142b4601f9b1617

    • SHA1

      f85dbcb5f31ac7064a5cd401bc300daa9bcf6121

    • SHA256

      0f6ab3e9a2309f8ba6e680424feaa6ebca8904e616655523230d7b25fad29c58

    • SHA512

      84f59cf893932b6de269b0a104de21cc7f0fa561509ab24b6be2a5738ea425d6f8da9248b8a4215611c73aba26165de6305abc53b94d4b8df7afb8d564bb4f72

    • SSDEEP

      1536:S6F6BcMAByLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOZ:S6FtMAByfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks