General

  • Target

    74aa1a2403555156c3033a8845bd3d53_JaffaCakes118

  • Size

    348KB

  • Sample

    240526-hpm4pabe58

  • MD5

    74aa1a2403555156c3033a8845bd3d53

  • SHA1

    d6aeb7a917cf676c6284cf87219a595511da67b9

  • SHA256

    55e0deae1f4d4faaeb0e042e204cd7c544739e9d394d319fdf50f2fa8f96749a

  • SHA512

    3f088ad524600bbc40e70dfbd542c5ea036eed642c1afed2f9e8d0fe6b60326b6c7d93049bd70f420a48db2db7486d0ad3b7facb30fb39ba9f1bc0b8457b2684

  • SSDEEP

    6144:SAmczz4OsMYod+X3oI+YRGDe1sMYod+X3oI+YRGDev:dmczz4M5d+X3vGDG5d+X3vGDc

Malware Config

Targets

    • Target

      74aa1a2403555156c3033a8845bd3d53_JaffaCakes118

    • Size

      348KB

    • MD5

      74aa1a2403555156c3033a8845bd3d53

    • SHA1

      d6aeb7a917cf676c6284cf87219a595511da67b9

    • SHA256

      55e0deae1f4d4faaeb0e042e204cd7c544739e9d394d319fdf50f2fa8f96749a

    • SHA512

      3f088ad524600bbc40e70dfbd542c5ea036eed642c1afed2f9e8d0fe6b60326b6c7d93049bd70f420a48db2db7486d0ad3b7facb30fb39ba9f1bc0b8457b2684

    • SSDEEP

      6144:SAmczz4OsMYod+X3oI+YRGDe1sMYod+X3oI+YRGDev:dmczz4M5d+X3vGDG5d+X3vGDc

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks