General

  • Target

    721f28855eaecfa2916f18d4c2788a16_JaffaCakes118

  • Size

    155KB

  • Sample

    240525-qt9r9aef95

  • MD5

    721f28855eaecfa2916f18d4c2788a16

  • SHA1

    642a89c2483e356ae7ee2dc1bc41e667308bd7c9

  • SHA256

    8218b8c3cd3e38dabdd1152a0bddb99252e5a6bcc1de6261458e76f693a5bfbd

  • SHA512

    368ebf0677af5013a0764d076669bcc4b1ce7e290299016a25eb20c03956dc1c8b57e58a5e2bdb7e641dacf325ce8fe77af58c83cb9e220322e458fd970665ff

  • SSDEEP

    1536:ixRT2PjsNDUCTyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJruH:iHDDUCTyfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      721f28855eaecfa2916f18d4c2788a16_JaffaCakes118

    • Size

      155KB

    • MD5

      721f28855eaecfa2916f18d4c2788a16

    • SHA1

      642a89c2483e356ae7ee2dc1bc41e667308bd7c9

    • SHA256

      8218b8c3cd3e38dabdd1152a0bddb99252e5a6bcc1de6261458e76f693a5bfbd

    • SHA512

      368ebf0677af5013a0764d076669bcc4b1ce7e290299016a25eb20c03956dc1c8b57e58a5e2bdb7e641dacf325ce8fe77af58c83cb9e220322e458fd970665ff

    • SSDEEP

      1536:ixRT2PjsNDUCTyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJruH:iHDDUCTyfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks