General

  • Target

    73542d2d0e0431994ef059c96cae7c0e_JaffaCakes118

  • Size

    196KB

  • Sample

    240525-1hpcaabd2w

  • MD5

    73542d2d0e0431994ef059c96cae7c0e

  • SHA1

    1cd5296b66f2db878df10e29e875ce682af83aef

  • SHA256

    23b263535021c8f7b93361e60ecf8200988c4bda7859a5c5c1926ca29635a28c

  • SHA512

    d61d7e11140aed08314efa0d7cf56588ca9c09ca490db88ce0d933b627f6f32665c6d89ceedeb9f4350714f84c3fee20f2450a72f5d01ed50c92836be1e3ddf9

  • SSDEEP

    3072:tHlJt23zcANyfkMY+BES09JXAnyrZalI+YIms3rEJuodjoh:q3zcAYsMYod+X3oI+YN+EJXdoh

Malware Config

Targets

    • Target

      73542d2d0e0431994ef059c96cae7c0e_JaffaCakes118

    • Size

      196KB

    • MD5

      73542d2d0e0431994ef059c96cae7c0e

    • SHA1

      1cd5296b66f2db878df10e29e875ce682af83aef

    • SHA256

      23b263535021c8f7b93361e60ecf8200988c4bda7859a5c5c1926ca29635a28c

    • SHA512

      d61d7e11140aed08314efa0d7cf56588ca9c09ca490db88ce0d933b627f6f32665c6d89ceedeb9f4350714f84c3fee20f2450a72f5d01ed50c92836be1e3ddf9

    • SSDEEP

      3072:tHlJt23zcANyfkMY+BES09JXAnyrZalI+YIms3rEJuodjoh:q3zcAYsMYod+X3oI+YN+EJXdoh

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks