General

  • Target

    7174c526636bd11260023287717dd485_JaffaCakes118

  • Size

    123KB

  • Sample

    240525-kwas2scd99

  • MD5

    7174c526636bd11260023287717dd485

  • SHA1

    aeedb4a4ba5c6783091ffb7e11b0ce8f279a14b3

  • SHA256

    47c59edcab02b1607f4647b43f99b5947edf4777321e30b4927fecbf364fc479

  • SHA512

    5652684cd49a18c016d2b39282d8472c7180ca27259296b609873d3ac87c3a66e3af2c9c0273344bdc832feb9aaddf87367a1366403683f9361dcfc49a1f3211

  • SSDEEP

    1536:SaaixkyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dK:SdixkyfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      7174c526636bd11260023287717dd485_JaffaCakes118

    • Size

      123KB

    • MD5

      7174c526636bd11260023287717dd485

    • SHA1

      aeedb4a4ba5c6783091ffb7e11b0ce8f279a14b3

    • SHA256

      47c59edcab02b1607f4647b43f99b5947edf4777321e30b4927fecbf364fc479

    • SHA512

      5652684cd49a18c016d2b39282d8472c7180ca27259296b609873d3ac87c3a66e3af2c9c0273344bdc832feb9aaddf87367a1366403683f9361dcfc49a1f3211

    • SSDEEP

      1536:SaaixkyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dK:SdixkyfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks