General

  • Target

    6dcb6f9f2b9f6d06184b779c9d6aff7c_JaffaCakes118

  • Size

    2.7MB

  • Sample

    240524-jnl1nsac98

  • MD5

    6dcb6f9f2b9f6d06184b779c9d6aff7c

  • SHA1

    c9977ab539600da4ecb258abed52b3e670a19e19

  • SHA256

    8838da839cbd91cc5821d4617438431a146e929eaa7a69569c138d13cd9b3d9f

  • SHA512

    82fabcfae01469eed8199338a1a2c432ee3ca7361069e60f7bb3ef53c39b136ec3e85e520774c2606809aa19b9dab6ffc20005de9c37f29faa4ee173db71a9eb

  • SSDEEP

    24576:q+aDHsJ+aDHsX+aDHsT+aDHs1+aDHsT+aDHs1:4

Malware Config

Targets

    • Target

      6dcb6f9f2b9f6d06184b779c9d6aff7c_JaffaCakes118

    • Size

      2.7MB

    • MD5

      6dcb6f9f2b9f6d06184b779c9d6aff7c

    • SHA1

      c9977ab539600da4ecb258abed52b3e670a19e19

    • SHA256

      8838da839cbd91cc5821d4617438431a146e929eaa7a69569c138d13cd9b3d9f

    • SHA512

      82fabcfae01469eed8199338a1a2c432ee3ca7361069e60f7bb3ef53c39b136ec3e85e520774c2606809aa19b9dab6ffc20005de9c37f29faa4ee173db71a9eb

    • SSDEEP

      24576:q+aDHsJ+aDHsX+aDHsT+aDHs1+aDHsT+aDHs1:4

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks