General

  • Target

    6e0b33fedc138ca3dad4fbfc3fbd979f_JaffaCakes118

  • Size

    156KB

  • Sample

    240524-lfvc7ace6t

  • MD5

    6e0b33fedc138ca3dad4fbfc3fbd979f

  • SHA1

    335e41828fdf89ccad8c82df1c9b43d70974d42d

  • SHA256

    7b7599743d27b5ae3313e28be309a8b6733638d550691aa2295cc9e75e7e76ad

  • SHA512

    3dcb6bbcb24c474f4da146f4ddd617af3403112f25c8a1595fe8f964a292e37a943e7635cb67964df9ab8bfe41d699ab51572cdafdc49a14be7004111698de5a

  • SSDEEP

    1536:iARTJX3moN7TZyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJruH:iqRN3ZyfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      6e0b33fedc138ca3dad4fbfc3fbd979f_JaffaCakes118

    • Size

      156KB

    • MD5

      6e0b33fedc138ca3dad4fbfc3fbd979f

    • SHA1

      335e41828fdf89ccad8c82df1c9b43d70974d42d

    • SHA256

      7b7599743d27b5ae3313e28be309a8b6733638d550691aa2295cc9e75e7e76ad

    • SHA512

      3dcb6bbcb24c474f4da146f4ddd617af3403112f25c8a1595fe8f964a292e37a943e7635cb67964df9ab8bfe41d699ab51572cdafdc49a14be7004111698de5a

    • SSDEEP

      1536:iARTJX3moN7TZyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJruH:iqRN3ZyfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks