General

  • Target

    74562e296c27ff221f3a9f748344a325_JaffaCakes118

  • Size

    120KB

  • Sample

    240526-e6xgxafh25

  • MD5

    74562e296c27ff221f3a9f748344a325

  • SHA1

    13e805243a5415adb0b3530a8bc2c2457619fbda

  • SHA256

    21a92436c5b0ccfd5018d08f90d684e38e1a364002795b86296856acd9535fea

  • SHA512

    1a811755c63b8ef664d67b915bc4c2dcf79860dc0723603dc369a251095202f0c0d9ad1778fcd0a05cc80afecb5ec6a70be08eecbef07802187cbf271697e243

  • SSDEEP

    1536:S3yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGCsQy:S3yfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      74562e296c27ff221f3a9f748344a325_JaffaCakes118

    • Size

      120KB

    • MD5

      74562e296c27ff221f3a9f748344a325

    • SHA1

      13e805243a5415adb0b3530a8bc2c2457619fbda

    • SHA256

      21a92436c5b0ccfd5018d08f90d684e38e1a364002795b86296856acd9535fea

    • SHA512

      1a811755c63b8ef664d67b915bc4c2dcf79860dc0723603dc369a251095202f0c0d9ad1778fcd0a05cc80afecb5ec6a70be08eecbef07802187cbf271697e243

    • SSDEEP

      1536:S3yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGCsQy:S3yfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks