General

  • Target

    732988fa0dcbab160478a833b43d16e9_JaffaCakes118

  • Size

    522KB

  • Sample

    240525-zcbcsshd81

  • MD5

    732988fa0dcbab160478a833b43d16e9

  • SHA1

    8100537bbac9720c382912679eda9c5a69c00bef

  • SHA256

    1e7e26161715fea8da4ed40f171f89e3083bc30b862c840589874d0c4b5c950e

  • SHA512

    a810850c67cfd5755d9499a2946c808873eef2ff1b5fca2b3e6c5a92ac8f12c0e15e3ff701b10678f51cad64f1fdbb5926940e48b9421970651cb62c593ccab4

  • SSDEEP

    6144:SncsMYod+X3oI+YGVsjVp9sMYod+X3oI+YGVsjVtsMYod+X3oI+YGVsjVP:MK5d+X3zjVpJ5d+X3zjV55d+X3zjVP

Malware Config

Targets

    • Target

      732988fa0dcbab160478a833b43d16e9_JaffaCakes118

    • Size

      522KB

    • MD5

      732988fa0dcbab160478a833b43d16e9

    • SHA1

      8100537bbac9720c382912679eda9c5a69c00bef

    • SHA256

      1e7e26161715fea8da4ed40f171f89e3083bc30b862c840589874d0c4b5c950e

    • SHA512

      a810850c67cfd5755d9499a2946c808873eef2ff1b5fca2b3e6c5a92ac8f12c0e15e3ff701b10678f51cad64f1fdbb5926940e48b9421970651cb62c593ccab4

    • SSDEEP

      6144:SncsMYod+X3oI+YGVsjVp9sMYod+X3oI+YGVsjVtsMYod+X3oI+YGVsjVP:MK5d+X3zjVpJ5d+X3zjV55d+X3zjVP

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks