General

  • Target

    7442bb1a19bf47fd124e9f6765c7209f_JaffaCakes118

  • Size

    347KB

  • Sample

    240526-ekd4faeh48

  • MD5

    7442bb1a19bf47fd124e9f6765c7209f

  • SHA1

    dd0633d845c7ea7192b5b9f36dcee1e4cd404eca

  • SHA256

    d31e75d9491e350c642ca8f3c80c229c5472eed335c562e5854acf630dcac0bb

  • SHA512

    ac858c1d20d7097427011c9743b17ed173d76fb4778f4b4186f8c6d9a42ed5d05bb98600657f4eba2aa933bee84faea3bc76557ceb3c5d79459d61197e7a98af

  • SSDEEP

    6144:WsMYod+X3oI+YzOjzvsMYod+X3oI+Y5sMYod+X3oI+YQ:05d+X3Bk5d+X3f5d+X3+

Malware Config

Targets

    • Target

      7442bb1a19bf47fd124e9f6765c7209f_JaffaCakes118

    • Size

      347KB

    • MD5

      7442bb1a19bf47fd124e9f6765c7209f

    • SHA1

      dd0633d845c7ea7192b5b9f36dcee1e4cd404eca

    • SHA256

      d31e75d9491e350c642ca8f3c80c229c5472eed335c562e5854acf630dcac0bb

    • SHA512

      ac858c1d20d7097427011c9743b17ed173d76fb4778f4b4186f8c6d9a42ed5d05bb98600657f4eba2aa933bee84faea3bc76557ceb3c5d79459d61197e7a98af

    • SSDEEP

      6144:WsMYod+X3oI+YzOjzvsMYod+X3oI+Y5sMYod+X3oI+YQ:05d+X3Bk5d+X3f5d+X3+

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks