General

  • Target

    747b411e6377b17961ca8005aba61b4f_JaffaCakes118

  • Size

    176KB

  • Sample

    240526-ga5jragg4x

  • MD5

    747b411e6377b17961ca8005aba61b4f

  • SHA1

    7b6325361c9037e80bd409989150c7b6c15deb08

  • SHA256

    92b91f739e86575107eb02c98075facf2286689daa8de6178603c4bb37c340ff

  • SHA512

    2fbeda0bab1a1d808cc4b922c9538381f562d3905eb8cc700073d3e17ede7ce57b62ef4f386254824a14c9ddfcf1397401a82651516575a9b66a9c4cbc3be102

  • SSDEEP

    3072:SEAmxyfkMY+BES09JXAnyrZalI+Y0Buv07w1GkjkjzT:SEAm0sMYod+X3oI+Y0BuvuOGkgr

Malware Config

Targets

    • Target

      747b411e6377b17961ca8005aba61b4f_JaffaCakes118

    • Size

      176KB

    • MD5

      747b411e6377b17961ca8005aba61b4f

    • SHA1

      7b6325361c9037e80bd409989150c7b6c15deb08

    • SHA256

      92b91f739e86575107eb02c98075facf2286689daa8de6178603c4bb37c340ff

    • SHA512

      2fbeda0bab1a1d808cc4b922c9538381f562d3905eb8cc700073d3e17ede7ce57b62ef4f386254824a14c9ddfcf1397401a82651516575a9b66a9c4cbc3be102

    • SSDEEP

      3072:SEAmxyfkMY+BES09JXAnyrZalI+Y0Buv07w1GkjkjzT:SEAm0sMYod+X3oI+Y0BuvuOGkgr

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks