General

  • Target

    6e6006400294e208e6ff829d1ca5e44c_JaffaCakes118

  • Size

    155KB

  • Sample

    240524-nreg8afc8s

  • MD5

    6e6006400294e208e6ff829d1ca5e44c

  • SHA1

    6be1b931dd0de356b0c4babe41dc5913093ddeaf

  • SHA256

    a9d5c0cffe233b1c8b461d81d36e85485f625a490ee94341b39b02127e1f48b6

  • SHA512

    939e26d4535c72b85c24f76b5c9adcb9fc3e9b888df0609427c91458d49a7a0b5ca565ec35a38f6cb86416830fb40c075d777e065637281a9b9f6a70d7e51244

  • SSDEEP

    1536:iERTMxwcc/PRVyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJruH:i2VRVyfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      6e6006400294e208e6ff829d1ca5e44c_JaffaCakes118

    • Size

      155KB

    • MD5

      6e6006400294e208e6ff829d1ca5e44c

    • SHA1

      6be1b931dd0de356b0c4babe41dc5913093ddeaf

    • SHA256

      a9d5c0cffe233b1c8b461d81d36e85485f625a490ee94341b39b02127e1f48b6

    • SHA512

      939e26d4535c72b85c24f76b5c9adcb9fc3e9b888df0609427c91458d49a7a0b5ca565ec35a38f6cb86416830fb40c075d777e065637281a9b9f6a70d7e51244

    • SSDEEP

      1536:iERTMxwcc/PRVyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJruH:i2VRVyfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks