General

  • Target

    6ed084db4c643d97720dffdfeb2930c6_JaffaCakes118

  • Size

    156KB

  • Sample

    240524-rnpessgh7x

  • MD5

    6ed084db4c643d97720dffdfeb2930c6

  • SHA1

    d68f67ab80aafba1851166f22b5fc41f6c85c22a

  • SHA256

    16bf09a02bcd5c1231f81bd730cc239cef24f213c9681c94ecd8575b45798516

  • SHA512

    fa14239fecbb7a4ce00df9f6b34eda746bc6b7457affe93f65ee7dd19676ec7c8696ba19249d3aeabc7d0895c156c9f8198c0464a6c4bb2217cea4177190637f

  • SSDEEP

    1536:iQRTVJ9Ng3S2QaiyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJA:i6MZiyfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      6ed084db4c643d97720dffdfeb2930c6_JaffaCakes118

    • Size

      156KB

    • MD5

      6ed084db4c643d97720dffdfeb2930c6

    • SHA1

      d68f67ab80aafba1851166f22b5fc41f6c85c22a

    • SHA256

      16bf09a02bcd5c1231f81bd730cc239cef24f213c9681c94ecd8575b45798516

    • SHA512

      fa14239fecbb7a4ce00df9f6b34eda746bc6b7457affe93f65ee7dd19676ec7c8696ba19249d3aeabc7d0895c156c9f8198c0464a6c4bb2217cea4177190637f

    • SSDEEP

      1536:iQRTVJ9Ng3S2QaiyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJA:i6MZiyfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks