General

  • Target

    6ea134369f8d354ac47bfb1ae02c2232_JaffaCakes118

  • Size

    176KB

  • Sample

    240524-qgyt8afb7z

  • MD5

    6ea134369f8d354ac47bfb1ae02c2232

  • SHA1

    f4a2ef0454ea6dedb265fe4828f62f70b0ab9c94

  • SHA256

    48dab6d4f2665ad550a5548b7e4ba277f48a1f2483eb5a2f2fc3602b727bc31b

  • SHA512

    34c84620bc49d21ac9436a289311f3e49211ccc5c63088ee85cf27744389d5f52693febcdedc7839f88cc4b0d3bf18c3119bede98aac7f347b9765dbc7af15c4

  • SSDEEP

    3072:SiCyfkMY+BES09JXAnyrZalI+Y5N86QwUdedbFilfO5YFiM:SiHsMYod+X3oI+Yn86/U9jFiM

Malware Config

Targets

    • Target

      6ea134369f8d354ac47bfb1ae02c2232_JaffaCakes118

    • Size

      176KB

    • MD5

      6ea134369f8d354ac47bfb1ae02c2232

    • SHA1

      f4a2ef0454ea6dedb265fe4828f62f70b0ab9c94

    • SHA256

      48dab6d4f2665ad550a5548b7e4ba277f48a1f2483eb5a2f2fc3602b727bc31b

    • SHA512

      34c84620bc49d21ac9436a289311f3e49211ccc5c63088ee85cf27744389d5f52693febcdedc7839f88cc4b0d3bf18c3119bede98aac7f347b9765dbc7af15c4

    • SSDEEP

      3072:SiCyfkMY+BES09JXAnyrZalI+Y5N86QwUdedbFilfO5YFiM:SiHsMYod+X3oI+Yn86/U9jFiM

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks