General

  • Target

    6fc8ecf2abd14b06f81c604472f9dfaa_JaffaCakes118

  • Size

    128KB

  • Sample

    240524-zgzk7aag46

  • MD5

    6fc8ecf2abd14b06f81c604472f9dfaa

  • SHA1

    c614bdf70b49a9dcccfd2e5fee13cbac0a90deb6

  • SHA256

    463a749522d94399408ffeccbca5b173c2a17c87fe9d64ce4e0b9f4852af0fdd

  • SHA512

    24470a67f5d9247272772cbb34cdacc06179b8d085f0acbcb644200a82d03edf8dadc2eac49da3a53ebcbf371d5b53f09f39114ac655c7dcadfaec521fc4d225

  • SSDEEP

    1536:SGgcKxOKGOKaOKAoOKKHEyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09wd:SwHEyfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      6fc8ecf2abd14b06f81c604472f9dfaa_JaffaCakes118

    • Size

      128KB

    • MD5

      6fc8ecf2abd14b06f81c604472f9dfaa

    • SHA1

      c614bdf70b49a9dcccfd2e5fee13cbac0a90deb6

    • SHA256

      463a749522d94399408ffeccbca5b173c2a17c87fe9d64ce4e0b9f4852af0fdd

    • SHA512

      24470a67f5d9247272772cbb34cdacc06179b8d085f0acbcb644200a82d03edf8dadc2eac49da3a53ebcbf371d5b53f09f39114ac655c7dcadfaec521fc4d225

    • SSDEEP

      1536:SGgcKxOKGOKaOKAoOKKHEyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09wd:SwHEyfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks