General

  • Target

    762e68e6aecbba1d67cfa1ab6ca06840_JaffaCakes118

  • Size

    155KB

  • Sample

    240526-vm34caed33

  • MD5

    762e68e6aecbba1d67cfa1ab6ca06840

  • SHA1

    e3238990a2f877a653b38a13f3a9c63a48cad223

  • SHA256

    5026da7b7278b46facd616c588d189fb3a854a31adc632fa60b530baac78e969

  • SHA512

    9418aa46a531c8564dc3b680c30fcd45228a3f6a6ec899766c7ecb9ecf2892342951f3f3adc4c4705615b5dd7d6b4ce75f31a08673f1517d82df5397f7ba06ba

  • SSDEEP

    1536:i0RTUOV6cebnyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusG:imknyfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      762e68e6aecbba1d67cfa1ab6ca06840_JaffaCakes118

    • Size

      155KB

    • MD5

      762e68e6aecbba1d67cfa1ab6ca06840

    • SHA1

      e3238990a2f877a653b38a13f3a9c63a48cad223

    • SHA256

      5026da7b7278b46facd616c588d189fb3a854a31adc632fa60b530baac78e969

    • SHA512

      9418aa46a531c8564dc3b680c30fcd45228a3f6a6ec899766c7ecb9ecf2892342951f3f3adc4c4705615b5dd7d6b4ce75f31a08673f1517d82df5397f7ba06ba

    • SSDEEP

      1536:i0RTUOV6cebnyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusG:imknyfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks