General

  • Target

    6db9b44092f533271151951b4e190aee_JaffaCakes118

  • Size

    194KB

  • Sample

    240524-h5814ahf6t

  • MD5

    6db9b44092f533271151951b4e190aee

  • SHA1

    673c11c42aae8138427e21d27b7dd1edc2e98438

  • SHA256

    1ee207136411e2f3e365909f47b3b5ad8ea88eaeaeac54e752a7f035fff67115

  • SHA512

    255b0e6dcd7d1e6c9dd1852b520dcc63d56f4ef5bcbfadd0b12774b3220a0318307aa6f73368ecd9d4e055d1ba2fe3ebcac0280b3610a88710c81112ec21d73e

  • SSDEEP

    3072:S1cu10jyfkMY+BES09JXAnyrZalI+Ye47uM9f7UL:SB9sMYod+X3oI+Ye4pf7UL

Malware Config

Targets

    • Target

      6db9b44092f533271151951b4e190aee_JaffaCakes118

    • Size

      194KB

    • MD5

      6db9b44092f533271151951b4e190aee

    • SHA1

      673c11c42aae8138427e21d27b7dd1edc2e98438

    • SHA256

      1ee207136411e2f3e365909f47b3b5ad8ea88eaeaeac54e752a7f035fff67115

    • SHA512

      255b0e6dcd7d1e6c9dd1852b520dcc63d56f4ef5bcbfadd0b12774b3220a0318307aa6f73368ecd9d4e055d1ba2fe3ebcac0280b3610a88710c81112ec21d73e

    • SSDEEP

      3072:S1cu10jyfkMY+BES09JXAnyrZalI+Ye47uM9f7UL:SB9sMYod+X3oI+Ye4pf7UL

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks