General

  • Target

    78b1495296c3669431259a04426e73e6_JaffaCakes118

  • Size

    238KB

  • Sample

    240527-lj6wdsgb84

  • MD5

    78b1495296c3669431259a04426e73e6

  • SHA1

    a3e8977624a36fa54adb128de67eef98c371535d

  • SHA256

    c64d7e010c9c6f8088ec1b32f974b91721e98658a93c88a5b09931f285e70b53

  • SHA512

    7ccc7d6c77d065b0bc5be38025df7d37333a9493a6d2a4a45826f8875786cd221d5d5e52f7e7292ff105e5fb884137febbef359a411263f48cce5194442b6002

  • SSDEEP

    3072:S/csyfkMY+BES09JXAnyrZalI+YFyfkMY+BES09JXAnyrZalI+YQ:S0RsMYod+X3oI+YwsMYod+X3oI+YQ

Malware Config

Targets

    • Target

      78b1495296c3669431259a04426e73e6_JaffaCakes118

    • Size

      238KB

    • MD5

      78b1495296c3669431259a04426e73e6

    • SHA1

      a3e8977624a36fa54adb128de67eef98c371535d

    • SHA256

      c64d7e010c9c6f8088ec1b32f974b91721e98658a93c88a5b09931f285e70b53

    • SHA512

      7ccc7d6c77d065b0bc5be38025df7d37333a9493a6d2a4a45826f8875786cd221d5d5e52f7e7292ff105e5fb884137febbef359a411263f48cce5194442b6002

    • SSDEEP

      3072:S/csyfkMY+BES09JXAnyrZalI+YFyfkMY+BES09JXAnyrZalI+YQ:S0RsMYod+X3oI+YwsMYod+X3oI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks