General

  • Target

    6d5f3c8be9a48f7c93a81c093bf8c9d9_JaffaCakes118

  • Size

    131KB

  • Sample

    240524-fdr76adg9z

  • MD5

    6d5f3c8be9a48f7c93a81c093bf8c9d9

  • SHA1

    6647bbdfaac04143a454c67ae42afc0f106f0b2b

  • SHA256

    3617abc8767ec99dde080863457f5f9b8bb31a12f318a3a3981d5597fee0b82f

  • SHA512

    3ee87d64e3d6f9bff30a060eb165ecdabe7de7c34ac43ebe1d21a3115e469f34d3d3176ca6f5d3f5dd36567fc8fb3d71af0deda99a5e0c25532bce1b692d0945

  • SSDEEP

    1536:StitqKiyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9w:StitqKiyfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      6d5f3c8be9a48f7c93a81c093bf8c9d9_JaffaCakes118

    • Size

      131KB

    • MD5

      6d5f3c8be9a48f7c93a81c093bf8c9d9

    • SHA1

      6647bbdfaac04143a454c67ae42afc0f106f0b2b

    • SHA256

      3617abc8767ec99dde080863457f5f9b8bb31a12f318a3a3981d5597fee0b82f

    • SHA512

      3ee87d64e3d6f9bff30a060eb165ecdabe7de7c34ac43ebe1d21a3115e469f34d3d3176ca6f5d3f5dd36567fc8fb3d71af0deda99a5e0c25532bce1b692d0945

    • SSDEEP

      1536:StitqKiyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9w:StitqKiyfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks