General

  • Target

    7344d13ac054afdd7cedd15ed320bd7b_JaffaCakes118

  • Size

    476KB

  • Sample

    240525-z2y56aaf3w

  • MD5

    7344d13ac054afdd7cedd15ed320bd7b

  • SHA1

    88922dbbc59e5e24b5a24a9ae35767290cc831a5

  • SHA256

    c9e1e241c1f569b78f7cfec820f589bb1aefe043a7b7b9ae6d610660e10a3880

  • SHA512

    95cc6250f1458d4fe92c2f7fdfa43289b61bc4628bb8fc8ec0732d980d554799cb86b72f24485a47bfe53a8bffe12ffc11889877eab5688e681f581f7123f177

  • SSDEEP

    6144:SBsMYod+X3oI+YZIlssMYod+X3oI+YJKsMYod+X3oI+YLsMYod+X3oI+Yi:o5d+X3zsa5d+X3zo5d+X315d+X3w

Malware Config

Targets

    • Target

      7344d13ac054afdd7cedd15ed320bd7b_JaffaCakes118

    • Size

      476KB

    • MD5

      7344d13ac054afdd7cedd15ed320bd7b

    • SHA1

      88922dbbc59e5e24b5a24a9ae35767290cc831a5

    • SHA256

      c9e1e241c1f569b78f7cfec820f589bb1aefe043a7b7b9ae6d610660e10a3880

    • SHA512

      95cc6250f1458d4fe92c2f7fdfa43289b61bc4628bb8fc8ec0732d980d554799cb86b72f24485a47bfe53a8bffe12ffc11889877eab5688e681f581f7123f177

    • SSDEEP

      6144:SBsMYod+X3oI+YZIlssMYod+X3oI+YJKsMYod+X3oI+YLsMYod+X3oI+Yi:o5d+X3zsa5d+X3zo5d+X315d+X3w

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks