General

  • Target

    71aeba1b3dd38e19694f7eed033976cd_JaffaCakes118

  • Size

    134KB

  • Sample

    240525-mptzfsec59

  • MD5

    71aeba1b3dd38e19694f7eed033976cd

  • SHA1

    46efde4b6182fdb2539957ae38670ba847c05f12

  • SHA256

    73cdb9cc1f884b8f4fd1b298ac2867c76e9c37ab04f18dc2d1a701e0b3223b62

  • SHA512

    5a84a77157eebc331d243649b9187d2f947c17cee7f809bed5f07048f29e7a833ae3a920cb7d15f9d4a3ee8f88934d16d678b2e1c06744612a8637d8c80e552c

  • SSDEEP

    1536:Sg1SKT8/yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy+:Sg+yfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      71aeba1b3dd38e19694f7eed033976cd_JaffaCakes118

    • Size

      134KB

    • MD5

      71aeba1b3dd38e19694f7eed033976cd

    • SHA1

      46efde4b6182fdb2539957ae38670ba847c05f12

    • SHA256

      73cdb9cc1f884b8f4fd1b298ac2867c76e9c37ab04f18dc2d1a701e0b3223b62

    • SHA512

      5a84a77157eebc331d243649b9187d2f947c17cee7f809bed5f07048f29e7a833ae3a920cb7d15f9d4a3ee8f88934d16d678b2e1c06744612a8637d8c80e552c

    • SSDEEP

      1536:Sg1SKT8/yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy+:Sg+yfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Tasks