General

  • Target

    75adb4e7106979085f8a77ec2593ddaa_JaffaCakes118

  • Size

    348KB

  • Sample

    240526-q3485ahd65

  • MD5

    75adb4e7106979085f8a77ec2593ddaa

  • SHA1

    168a00f5f1a326e92be10b19f688448ba6f6529c

  • SHA256

    32d18823ea065f8a8700978d9628822cf2d56cd7d8b96b341284d373c54c1f05

  • SHA512

    60967e0bedbdd12e5edd5aa2e7568fe9d5b28fbae50e9dab0e581999c4397248a07dfa1f7ca85c7107446c8bf3c3b7ab3a0f746791b76b200d6abeec1b02a84d

  • SSDEEP

    6144:hfsMYod+X3oI+Y/IwsMYod+X3oI+Y5sMYod+X3oI+YQ:hj5d+X3dIe5d+X3f5d+X3+

Malware Config

Targets

    • Target

      75adb4e7106979085f8a77ec2593ddaa_JaffaCakes118

    • Size

      348KB

    • MD5

      75adb4e7106979085f8a77ec2593ddaa

    • SHA1

      168a00f5f1a326e92be10b19f688448ba6f6529c

    • SHA256

      32d18823ea065f8a8700978d9628822cf2d56cd7d8b96b341284d373c54c1f05

    • SHA512

      60967e0bedbdd12e5edd5aa2e7568fe9d5b28fbae50e9dab0e581999c4397248a07dfa1f7ca85c7107446c8bf3c3b7ab3a0f746791b76b200d6abeec1b02a84d

    • SSDEEP

      6144:hfsMYod+X3oI+Y/IwsMYod+X3oI+Y5sMYod+X3oI+YQ:hj5d+X3dIe5d+X3f5d+X3+

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks