General

  • Target

    6d19869969972d3f0889ea5adc0a73de_JaffaCakes118

  • Size

    185KB

  • Sample

    240524-da8dvsae7y

  • MD5

    6d19869969972d3f0889ea5adc0a73de

  • SHA1

    f5b24ee861276b3280aeb703d9c6c0f668b7e203

  • SHA256

    08d4256f9c00f5123e395c3bf983ef502cb34d56a99eeca10e33698fde729b49

  • SHA512

    13979425a6b51993bd271187d18106c270f234caa8da3984ef66a2431dda84755b2fac842c521a00883a7784517bb51b421da4c92186ae9a32dcdd6984acd9e6

  • SSDEEP

    3072:je3yfkMY+BES09JXAnyrZalI+Y5N86QwUdedbFilfO5YFis:9sMYod+X3oI+Yn86/U9jFis

Malware Config

Targets

    • Target

      6d19869969972d3f0889ea5adc0a73de_JaffaCakes118

    • Size

      185KB

    • MD5

      6d19869969972d3f0889ea5adc0a73de

    • SHA1

      f5b24ee861276b3280aeb703d9c6c0f668b7e203

    • SHA256

      08d4256f9c00f5123e395c3bf983ef502cb34d56a99eeca10e33698fde729b49

    • SHA512

      13979425a6b51993bd271187d18106c270f234caa8da3984ef66a2431dda84755b2fac842c521a00883a7784517bb51b421da4c92186ae9a32dcdd6984acd9e6

    • SSDEEP

      3072:je3yfkMY+BES09JXAnyrZalI+Y5N86QwUdedbFilfO5YFis:9sMYod+X3oI+Yn86/U9jFis

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks