General

  • Target

    72b4b6f00337ba359e01058bed51efd8_JaffaCakes118

  • Size

    155KB

  • Sample

    240525-vywteabg8t

  • MD5

    72b4b6f00337ba359e01058bed51efd8

  • SHA1

    98b0d9f7eb767f5f85638a47979d479e52eea582

  • SHA256

    438343aa6aaa6a02881df89841e30460d2610a18e27dea01a612ee8b602531b4

  • SHA512

    c3bf99f4d3315e60a5f710c2400a09df1dc74f23d197c04e6868ea804de3d8ae5520c476c9cd9b7ec3b7294ea87fbb27d05f42d906c95bb6fc08574e56c381ea

  • SSDEEP

    1536:iQRTXc5KhAzByLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusG:i6bYByfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      72b4b6f00337ba359e01058bed51efd8_JaffaCakes118

    • Size

      155KB

    • MD5

      72b4b6f00337ba359e01058bed51efd8

    • SHA1

      98b0d9f7eb767f5f85638a47979d479e52eea582

    • SHA256

      438343aa6aaa6a02881df89841e30460d2610a18e27dea01a612ee8b602531b4

    • SHA512

      c3bf99f4d3315e60a5f710c2400a09df1dc74f23d197c04e6868ea804de3d8ae5520c476c9cd9b7ec3b7294ea87fbb27d05f42d906c95bb6fc08574e56c381ea

    • SSDEEP

      1536:iQRTXc5KhAzByLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusG:i6bYByfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks