General

  • Target

    77db41d7b61527b30f2dd2263a17fa14_JaffaCakes118

  • Size

    125KB

  • Sample

    240527-en8r8age94

  • MD5

    77db41d7b61527b30f2dd2263a17fa14

  • SHA1

    0fac77dd9c541169db6151d27d594ab16b4eb836

  • SHA256

    b762e8dd240dc2fd06341e96d823476f78fb995d24f3c59816592d6caae4aa4e

  • SHA512

    4516e0c99853293bcccc8d4c2ebc4e4daa06901f1f5fd98c5c25e2a6d30367f2bb0d06ff520b5d3ce1e81544b31b69a753f69be01d51c355f307e6e19a13fbc5

  • SSDEEP

    1536:3NfyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGCsn:3NfyfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      77db41d7b61527b30f2dd2263a17fa14_JaffaCakes118

    • Size

      125KB

    • MD5

      77db41d7b61527b30f2dd2263a17fa14

    • SHA1

      0fac77dd9c541169db6151d27d594ab16b4eb836

    • SHA256

      b762e8dd240dc2fd06341e96d823476f78fb995d24f3c59816592d6caae4aa4e

    • SHA512

      4516e0c99853293bcccc8d4c2ebc4e4daa06901f1f5fd98c5c25e2a6d30367f2bb0d06ff520b5d3ce1e81544b31b69a753f69be01d51c355f307e6e19a13fbc5

    • SSDEEP

      1536:3NfyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGCsn:3NfyfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks