General

  • Target

    7942217e689a6f8c1d7087364f45e871_JaffaCakes118

  • Size

    144KB

  • Sample

    240527-qrav5seb4x

  • MD5

    7942217e689a6f8c1d7087364f45e871

  • SHA1

    67b708d3049dd45f8eb79ad58adbd4b736af9e4d

  • SHA256

    1f151a05e5fcdd202d44746153e1bbf64097a5bf3fc707ab986aaa3cbfe152f3

  • SHA512

    82637a4f362ddee96014120074862ec06505f99edfc26ede6184c7e2ebe76cb23c8f113e0ee70bc23191c4f2dce78aae0386156670abf9721f5d2b9ee71c49ea

  • SSDEEP

    1536:SKIhxjk9/yroyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusG:SKIhJroyfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      7942217e689a6f8c1d7087364f45e871_JaffaCakes118

    • Size

      144KB

    • MD5

      7942217e689a6f8c1d7087364f45e871

    • SHA1

      67b708d3049dd45f8eb79ad58adbd4b736af9e4d

    • SHA256

      1f151a05e5fcdd202d44746153e1bbf64097a5bf3fc707ab986aaa3cbfe152f3

    • SHA512

      82637a4f362ddee96014120074862ec06505f99edfc26ede6184c7e2ebe76cb23c8f113e0ee70bc23191c4f2dce78aae0386156670abf9721f5d2b9ee71c49ea

    • SSDEEP

      1536:SKIhxjk9/yroyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusG:SKIhJroyfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks