General

  • Target

    73d20b6eb36a37c84a29d0053a0ab5a2_JaffaCakes118

  • Size

    184KB

  • Sample

    240526-a81j5agg31

  • MD5

    73d20b6eb36a37c84a29d0053a0ab5a2

  • SHA1

    e5dc32fcc9e06a5630814c55c4c51425b8d13ca6

  • SHA256

    f31daf935cd3250df83d9af7289e1380e94678f08e940acb3cfdc92a3c84a71c

  • SHA512

    41ea0dbc0b1c5c64270ccac8083926cd6e40fc2eb9953907deb0b8bb9a2d57422bdfc70802c7cc4b98e81a9f131b01ee7586831a396b98d89d495a1c01b68070

  • SSDEEP

    3072:i5aQXLyfkMY+BES09JXAnyrZalI+Y5N86QwUdedbFilfO5YFis:TsMYod+X3oI+Yn86/U9jFis

Malware Config

Targets

    • Target

      73d20b6eb36a37c84a29d0053a0ab5a2_JaffaCakes118

    • Size

      184KB

    • MD5

      73d20b6eb36a37c84a29d0053a0ab5a2

    • SHA1

      e5dc32fcc9e06a5630814c55c4c51425b8d13ca6

    • SHA256

      f31daf935cd3250df83d9af7289e1380e94678f08e940acb3cfdc92a3c84a71c

    • SHA512

      41ea0dbc0b1c5c64270ccac8083926cd6e40fc2eb9953907deb0b8bb9a2d57422bdfc70802c7cc4b98e81a9f131b01ee7586831a396b98d89d495a1c01b68070

    • SSDEEP

      3072:i5aQXLyfkMY+BES09JXAnyrZalI+Y5N86QwUdedbFilfO5YFis:TsMYod+X3oI+Yn86/U9jFis

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks