General

  • Target

    7688be6461ed562527a545c33fc5d7a7_JaffaCakes118

  • Size

    110KB

  • Sample

    240526-xxc11shf47

  • MD5

    7688be6461ed562527a545c33fc5d7a7

  • SHA1

    e46859f20df750a5831c3e6237498c73fe6b0005

  • SHA256

    881c25c109bf231253fc5d81ad7c355644261a0c9f4924083ee050edd97928ee

  • SHA512

    6f3c7dfb7abe7dd71fe135ffa35048a9815dd60b538400f43916f5bda26241c66556e53bb9b8e48f2b01c43486c78e1e73fa187655aa7c80ecdb3ac3ca88f34e

  • SSDEEP

    1536:SMyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGCsQy:SMyfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      7688be6461ed562527a545c33fc5d7a7_JaffaCakes118

    • Size

      110KB

    • MD5

      7688be6461ed562527a545c33fc5d7a7

    • SHA1

      e46859f20df750a5831c3e6237498c73fe6b0005

    • SHA256

      881c25c109bf231253fc5d81ad7c355644261a0c9f4924083ee050edd97928ee

    • SHA512

      6f3c7dfb7abe7dd71fe135ffa35048a9815dd60b538400f43916f5bda26241c66556e53bb9b8e48f2b01c43486c78e1e73fa187655aa7c80ecdb3ac3ca88f34e

    • SSDEEP

      1536:SMyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGCsQy:SMyfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks