General

  • Target

    765b609bd5331636e38166bff19c84d4_JaffaCakes118

  • Size

    236KB

  • Sample

    240526-wq5l1sfg46

  • MD5

    765b609bd5331636e38166bff19c84d4

  • SHA1

    0e0a751ed1b5f055f02c19afd6b29b16cea064bc

  • SHA256

    2c7c7e151825f944ea12e87c26710c9b87d88f766a7974876fcfa08c5d18bda3

  • SHA512

    434e5a059846c72df52fdf7182be3d12e7790d73c225c94c948e67e12b4adc7c3485e718bb55e8178688110fafe1f8329636abc5a5bd6f985f1807009bb713fa

  • SSDEEP

    3072:SKOyfkMY+BES09JXAnyrZalI+YuyfkMY+BES09JXAnyrZalI+YQ:SKrsMYod+X3oI+YLsMYod+X3oI+YQ

Malware Config

Targets

    • Target

      765b609bd5331636e38166bff19c84d4_JaffaCakes118

    • Size

      236KB

    • MD5

      765b609bd5331636e38166bff19c84d4

    • SHA1

      0e0a751ed1b5f055f02c19afd6b29b16cea064bc

    • SHA256

      2c7c7e151825f944ea12e87c26710c9b87d88f766a7974876fcfa08c5d18bda3

    • SHA512

      434e5a059846c72df52fdf7182be3d12e7790d73c225c94c948e67e12b4adc7c3485e718bb55e8178688110fafe1f8329636abc5a5bd6f985f1807009bb713fa

    • SSDEEP

      3072:SKOyfkMY+BES09JXAnyrZalI+YuyfkMY+BES09JXAnyrZalI+YQ:SKrsMYod+X3oI+YLsMYod+X3oI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks