General

  • Target

    6dc815e9a4b9a34b45c2085e6036d54e_JaffaCakes118

  • Size

    351KB

  • Sample

    240524-jkegesab82

  • MD5

    6dc815e9a4b9a34b45c2085e6036d54e

  • SHA1

    0a95636dd5072fde5d14e194692c46eee747b913

  • SHA256

    9de0a3071db484166d4a3e0ff0bd18759df5834e78af09d5b95b4b057df5daed

  • SHA512

    0db654af043c073b67e58f1dafe4ccb48d09ba1162d4c4dfeff4d171ff7156dac6bb17f2888bf564c3ac52a4cf5935a9fdbdb06811d135f747b0e282069b428e

  • SSDEEP

    6144:STtp+Pn1qRZ7P4K97RLNLxsMYod+X3oI+YRGDe1sMYod+X3oI+YRGDev:0v+Pn1qRZ7P4K97RLNL95d+X3vGDG5d2

Malware Config

Targets

    • Target

      6dc815e9a4b9a34b45c2085e6036d54e_JaffaCakes118

    • Size

      351KB

    • MD5

      6dc815e9a4b9a34b45c2085e6036d54e

    • SHA1

      0a95636dd5072fde5d14e194692c46eee747b913

    • SHA256

      9de0a3071db484166d4a3e0ff0bd18759df5834e78af09d5b95b4b057df5daed

    • SHA512

      0db654af043c073b67e58f1dafe4ccb48d09ba1162d4c4dfeff4d171ff7156dac6bb17f2888bf564c3ac52a4cf5935a9fdbdb06811d135f747b0e282069b428e

    • SSDEEP

      6144:STtp+Pn1qRZ7P4K97RLNLxsMYod+X3oI+YRGDe1sMYod+X3oI+YRGDev:0v+Pn1qRZ7P4K97RLNL95d+X3vGDG5d2

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks