General

  • Target

    6b1398e69ebb4a7d9431d561c145ea44_JaffaCakes118

  • Size

    155KB

  • Sample

    240524-z2mr5abe25

  • MD5

    6b1398e69ebb4a7d9431d561c145ea44

  • SHA1

    789b5b14c3c68d2d2116e8f3690e8378599881d3

  • SHA256

    28b910e2f7039daba05abce966bd07317860a39c3505e6eb3d9ca76d8e86c8cf

  • SHA512

    1742d42e277eca69c29e5e915632f60d5c936173864e280331154a49bb7ebe1adabe53deda6fe6264c6b7b60a4f855b6084c79bbc30b500daa7de0084d099d7f

  • SSDEEP

    1536:i5RTdWe/eRRWxHQ1yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3om:ifHtQ1yfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      6b1398e69ebb4a7d9431d561c145ea44_JaffaCakes118

    • Size

      155KB

    • MD5

      6b1398e69ebb4a7d9431d561c145ea44

    • SHA1

      789b5b14c3c68d2d2116e8f3690e8378599881d3

    • SHA256

      28b910e2f7039daba05abce966bd07317860a39c3505e6eb3d9ca76d8e86c8cf

    • SHA512

      1742d42e277eca69c29e5e915632f60d5c936173864e280331154a49bb7ebe1adabe53deda6fe6264c6b7b60a4f855b6084c79bbc30b500daa7de0084d099d7f

    • SSDEEP

      1536:i5RTdWe/eRRWxHQ1yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3om:ifHtQ1yfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks