General

  • Target

    75ccbb10f4b7bb2aa9a5397edbcb2cc7_JaffaCakes118

  • Size

    457KB

  • Sample

    240526-rxexqahf6y

  • MD5

    75ccbb10f4b7bb2aa9a5397edbcb2cc7

  • SHA1

    c54c74af38f098709402b6822389a1e8e75b146a

  • SHA256

    18059377b3a4bbea91f5668671951a3746e75c498afb0f4eaf9cc8f76ac10051

  • SHA512

    b3152bffd2bb05b1ead764ed3b66d220429235f6ba955e52a8f1b5d9ab5f550f7f766cce6d8a440e574074312196036f061dd03b8be20d218ce7aedf07b4d414

  • SSDEEP

    6144:B7sMYod+X3oI+YksMYod+X3oI+YzsMYod+X3oI+YcsMYod+X3oI+YQ:95d+X345d+X355d+X345d+X3+

Malware Config

Targets

    • Target

      75ccbb10f4b7bb2aa9a5397edbcb2cc7_JaffaCakes118

    • Size

      457KB

    • MD5

      75ccbb10f4b7bb2aa9a5397edbcb2cc7

    • SHA1

      c54c74af38f098709402b6822389a1e8e75b146a

    • SHA256

      18059377b3a4bbea91f5668671951a3746e75c498afb0f4eaf9cc8f76ac10051

    • SHA512

      b3152bffd2bb05b1ead764ed3b66d220429235f6ba955e52a8f1b5d9ab5f550f7f766cce6d8a440e574074312196036f061dd03b8be20d218ce7aedf07b4d414

    • SSDEEP

      6144:B7sMYod+X3oI+YksMYod+X3oI+YzsMYod+X3oI+YcsMYod+X3oI+YQ:95d+X345d+X355d+X345d+X3+

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks