General

  • Target

    74a0cf55884e12832a450867266570cb_JaffaCakes118

  • Size

    349KB

  • Sample

    240526-hf5mdaab9y

  • MD5

    74a0cf55884e12832a450867266570cb

  • SHA1

    c04cc21c04656a379568a43f5510b3605f5817c3

  • SHA256

    b38a2f8884e58097e61c7cc5034bf0f7a7044fd6fb6c2ec474c53adb9de430c1

  • SHA512

    4b4209a2085681dc4be21ecbbee31267ed1531970fb4c976e33d2e18da9735487fb10f87a252ad552bfcf5bc82f224b226f1c001d1ab064f486e7d54935f1a66

  • SSDEEP

    6144:Suj2WsmOk0OSsMYod+X3oI+YRGDe1sMYod+X3oI+YRGDev:Hj2WsmOk0OQ5d+X3vGDG5d+X3vGDc

Malware Config

Targets

    • Target

      74a0cf55884e12832a450867266570cb_JaffaCakes118

    • Size

      349KB

    • MD5

      74a0cf55884e12832a450867266570cb

    • SHA1

      c04cc21c04656a379568a43f5510b3605f5817c3

    • SHA256

      b38a2f8884e58097e61c7cc5034bf0f7a7044fd6fb6c2ec474c53adb9de430c1

    • SHA512

      4b4209a2085681dc4be21ecbbee31267ed1531970fb4c976e33d2e18da9735487fb10f87a252ad552bfcf5bc82f224b226f1c001d1ab064f486e7d54935f1a66

    • SSDEEP

      6144:Suj2WsmOk0OSsMYod+X3oI+YRGDe1sMYod+X3oI+YRGDev:Hj2WsmOk0OQ5d+X3vGDG5d+X3vGDc

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks