General

  • Target

    6f002ffcaa76d850ce0770f8f75efaf0_JaffaCakes118

  • Size

    125KB

  • Sample

    240524-s11h9sbb45

  • MD5

    6f002ffcaa76d850ce0770f8f75efaf0

  • SHA1

    e53a2a25b169215bae31b5ab6ae893b696592b59

  • SHA256

    1243410eb95cecb884e8dfd8c30b43e5fb73646c364b9a7d32db502aef9dcab7

  • SHA512

    3fa411c78bbe6efbdca57000dc65da1fafcd96d2e67cf04dbbc568576521850cb64b69f26e071849b40e12a934ca46197b51ad29bf3cd5ea5b3c409a8cffd057

  • SSDEEP

    1536:SeEyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGCsn:SeEyfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      6f002ffcaa76d850ce0770f8f75efaf0_JaffaCakes118

    • Size

      125KB

    • MD5

      6f002ffcaa76d850ce0770f8f75efaf0

    • SHA1

      e53a2a25b169215bae31b5ab6ae893b696592b59

    • SHA256

      1243410eb95cecb884e8dfd8c30b43e5fb73646c364b9a7d32db502aef9dcab7

    • SHA512

      3fa411c78bbe6efbdca57000dc65da1fafcd96d2e67cf04dbbc568576521850cb64b69f26e071849b40e12a934ca46197b51ad29bf3cd5ea5b3c409a8cffd057

    • SSDEEP

      1536:SeEyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGCsn:SeEyfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks