General

  • Target

    6da06abbd74e0e46be034fa01a312bdc_JaffaCakes118

  • Size

    194KB

  • Sample

    240524-he7qcagf58

  • MD5

    6da06abbd74e0e46be034fa01a312bdc

  • SHA1

    7ce5a503ce3e3e53eff0f4c4b8f0a06462a8c193

  • SHA256

    a4e67f5cceb0fbdd7303b0032b40bf60833b30c5887c47a63e7190b61c502b1c

  • SHA512

    aca9559e1cdf8808bf0e6010f8454e7eecb49c7a2bd110f2eed8406f3a3e8ed91c66d6692f2468d743f5b402860adf1fd09fae265bb887c81a11d89f0a0af8b4

  • SSDEEP

    3072:SG5QzcIpHfHnm4Z4h75wc+HzyxVyfkMY+BES09JXAnyrZalI+YQ:SvKxAsMYod+X3oI+YQ

Malware Config

Targets

    • Target

      6da06abbd74e0e46be034fa01a312bdc_JaffaCakes118

    • Size

      194KB

    • MD5

      6da06abbd74e0e46be034fa01a312bdc

    • SHA1

      7ce5a503ce3e3e53eff0f4c4b8f0a06462a8c193

    • SHA256

      a4e67f5cceb0fbdd7303b0032b40bf60833b30c5887c47a63e7190b61c502b1c

    • SHA512

      aca9559e1cdf8808bf0e6010f8454e7eecb49c7a2bd110f2eed8406f3a3e8ed91c66d6692f2468d743f5b402860adf1fd09fae265bb887c81a11d89f0a0af8b4

    • SSDEEP

      3072:SG5QzcIpHfHnm4Z4h75wc+HzyxVyfkMY+BES09JXAnyrZalI+YQ:SvKxAsMYod+X3oI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks