General

  • Target

    75b708904c7a347968dc7c8b0a0dc9f8_JaffaCakes118

  • Size

    158KB

  • Sample

    240526-rb5w1sgh31

  • MD5

    75b708904c7a347968dc7c8b0a0dc9f8

  • SHA1

    cf1c940a187f569a2abc359ce5c2c2bbcbdda384

  • SHA256

    58de6bf2abe8c1281a8cf618fe8972b6c525b50d5e933d5a58eedb68a7381e7c

  • SHA512

    79727418d64e1ff5e9c0da68323212b6067dd7420d15152cc7fd8c9cb5eb60a325ed3b44dcec757472fcdada2840dbe1ad567170454d6f637bab9231d204fbe6

  • SSDEEP

    1536:iNRTr6k3gHpDsyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJruH:irssyfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      75b708904c7a347968dc7c8b0a0dc9f8_JaffaCakes118

    • Size

      158KB

    • MD5

      75b708904c7a347968dc7c8b0a0dc9f8

    • SHA1

      cf1c940a187f569a2abc359ce5c2c2bbcbdda384

    • SHA256

      58de6bf2abe8c1281a8cf618fe8972b6c525b50d5e933d5a58eedb68a7381e7c

    • SHA512

      79727418d64e1ff5e9c0da68323212b6067dd7420d15152cc7fd8c9cb5eb60a325ed3b44dcec757472fcdada2840dbe1ad567170454d6f637bab9231d204fbe6

    • SSDEEP

      1536:iNRTr6k3gHpDsyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJruH:irssyfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks