General

  • Target

    7536d0e07f86d209b06b08d04a664d15_JaffaCakes118

  • Size

    118KB

  • Sample

    240526-mq2exsgb56

  • MD5

    7536d0e07f86d209b06b08d04a664d15

  • SHA1

    6d0375d269de3635c4dd18f1a95bd9af15657669

  • SHA256

    d3b3c88b2a15ee2e64fcf283a5fe86901ef62e579e6e58aef7025e05fff1d0e7

  • SHA512

    1e7db493da869cf668f4b0f1b73594bfdc8fe85add82f27a26a3ff1de7cf046887c9310bcbb78644e499f47897b79793bb6012a0fa4821a0a212de4b2610bb58

  • SSDEEP

    1536:BHokNbyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dK:BHo8yfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      7536d0e07f86d209b06b08d04a664d15_JaffaCakes118

    • Size

      118KB

    • MD5

      7536d0e07f86d209b06b08d04a664d15

    • SHA1

      6d0375d269de3635c4dd18f1a95bd9af15657669

    • SHA256

      d3b3c88b2a15ee2e64fcf283a5fe86901ef62e579e6e58aef7025e05fff1d0e7

    • SHA512

      1e7db493da869cf668f4b0f1b73594bfdc8fe85add82f27a26a3ff1de7cf046887c9310bcbb78644e499f47897b79793bb6012a0fa4821a0a212de4b2610bb58

    • SSDEEP

      1536:BHokNbyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dK:BHo8yfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks