General

  • Target

    6f89a8329df725d055f8bef0fc3c93e5_JaffaCakes118

  • Size

    155KB

  • Sample

    240524-xteqfaga97

  • MD5

    6f89a8329df725d055f8bef0fc3c93e5

  • SHA1

    8d01bf0edb43aa5448eb61391b0914ee275e6f4e

  • SHA256

    712f1b8401c19a84738a058f4ad8585d33a77de5207f7a551cc7b2e309c8edd1

  • SHA512

    4d5c8123cebf09f33014ebdcc6ce2ac4b59469214ef8f1265ad887cd940b747a04ae88713b5bd722adaacf66c502b5085bc893d9149b35de7e86846a93610c87

  • SSDEEP

    1536:i2RTLKUVWk0a4pEzyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3om:icLsaHzyfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      6f89a8329df725d055f8bef0fc3c93e5_JaffaCakes118

    • Size

      155KB

    • MD5

      6f89a8329df725d055f8bef0fc3c93e5

    • SHA1

      8d01bf0edb43aa5448eb61391b0914ee275e6f4e

    • SHA256

      712f1b8401c19a84738a058f4ad8585d33a77de5207f7a551cc7b2e309c8edd1

    • SHA512

      4d5c8123cebf09f33014ebdcc6ce2ac4b59469214ef8f1265ad887cd940b747a04ae88713b5bd722adaacf66c502b5085bc893d9149b35de7e86846a93610c87

    • SSDEEP

      1536:i2RTLKUVWk0a4pEzyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3om:icLsaHzyfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks