General

  • Target

    75577387b67e7a3b94127a465d0b8277_JaffaCakes118

  • Size

    157KB

  • Sample

    240526-nm9skahe33

  • MD5

    75577387b67e7a3b94127a465d0b8277

  • SHA1

    2277acc95e41f87dfb06c70813d97ef4a40ca214

  • SHA256

    c9eb37eba08119269b89ff893960f84c903581f4213a8df1b9f95c5906a8b22a

  • SHA512

    5137f8cfcd3c113513c4ad5b987140fc904ce993d3f8799b86a6461d894b9da024d00afbc37514b5303fa6d2af712a3410aca7ac8d5413fdd5c93338c7c7b42c

  • SSDEEP

    1536:ilRT70ZcBio8rP0T0MyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXAZ:iT8om7MyfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      75577387b67e7a3b94127a465d0b8277_JaffaCakes118

    • Size

      157KB

    • MD5

      75577387b67e7a3b94127a465d0b8277

    • SHA1

      2277acc95e41f87dfb06c70813d97ef4a40ca214

    • SHA256

      c9eb37eba08119269b89ff893960f84c903581f4213a8df1b9f95c5906a8b22a

    • SHA512

      5137f8cfcd3c113513c4ad5b987140fc904ce993d3f8799b86a6461d894b9da024d00afbc37514b5303fa6d2af712a3410aca7ac8d5413fdd5c93338c7c7b42c

    • SSDEEP

      1536:ilRT70ZcBio8rP0T0MyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXAZ:iT8om7MyfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks