General

  • Target

    748eaf4eabab28c159946a8fbf644dd2_JaffaCakes118

  • Size

    348KB

  • Sample

    240526-gylfsahe51

  • MD5

    748eaf4eabab28c159946a8fbf644dd2

  • SHA1

    96f327c93080b05f542e9cf848b5461245cab62d

  • SHA256

    18e8228f02c615ca6129412898f43cdb945fe9cc7e0c7defdc4c5e23a4cd6e59

  • SHA512

    6ee9be2466713306292b84e92b7103f8dad79bc4a5c9abcd5dbbd9b68f9ecfdee2283f524015ed307cf220e7f9f8930e4f9e629782a4c23d450733c475320f6f

  • SSDEEP

    6144:SVjWP28YweBAzZjolsOsMYod+X3oI+YRGDe1sMYod+X3oI+YRGDev:+jWP28YweBAzZjolsM5d+X3vGDG5d+XN

Malware Config

Targets

    • Target

      748eaf4eabab28c159946a8fbf644dd2_JaffaCakes118

    • Size

      348KB

    • MD5

      748eaf4eabab28c159946a8fbf644dd2

    • SHA1

      96f327c93080b05f542e9cf848b5461245cab62d

    • SHA256

      18e8228f02c615ca6129412898f43cdb945fe9cc7e0c7defdc4c5e23a4cd6e59

    • SHA512

      6ee9be2466713306292b84e92b7103f8dad79bc4a5c9abcd5dbbd9b68f9ecfdee2283f524015ed307cf220e7f9f8930e4f9e629782a4c23d450733c475320f6f

    • SSDEEP

      6144:SVjWP28YweBAzZjolsOsMYod+X3oI+YRGDe1sMYod+X3oI+YRGDev:+jWP28YweBAzZjolsM5d+X3vGDG5d+XN

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks