General

  • Target

    78e80a860e3f53f2fe27da4e336efca5_JaffaCakes118

  • Size

    182KB

  • Sample

    240527-myek5agh5w

  • MD5

    78e80a860e3f53f2fe27da4e336efca5

  • SHA1

    9c99c7c690d5f9e23a4fbca608d7ebb9a26e03af

  • SHA256

    82419e46af388f3a861818125c07d86f41783edf2d96ec06f8a93fa61528a6b5

  • SHA512

    dc441484310eeaf6e3797a157ef4589635fe935b15739ae9d2759021a18d70c2affe4d1d95e58ad7bb8a9e2939158f71ee17e44611ee7ce7627627f9ad838ca7

  • SSDEEP

    1536:8yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGCsQSp:8yfkMY+BES09JXAnyrZalI+YqQoc3OSu

Malware Config

Targets

    • Target

      78e80a860e3f53f2fe27da4e336efca5_JaffaCakes118

    • Size

      182KB

    • MD5

      78e80a860e3f53f2fe27da4e336efca5

    • SHA1

      9c99c7c690d5f9e23a4fbca608d7ebb9a26e03af

    • SHA256

      82419e46af388f3a861818125c07d86f41783edf2d96ec06f8a93fa61528a6b5

    • SHA512

      dc441484310eeaf6e3797a157ef4589635fe935b15739ae9d2759021a18d70c2affe4d1d95e58ad7bb8a9e2939158f71ee17e44611ee7ce7627627f9ad838ca7

    • SSDEEP

      1536:8yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGCsQSp:8yfkMY+BES09JXAnyrZalI+YqQoc3OSu

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks