General

  • Target

    794af4687b6ce7be8bbdfad966370b50_JaffaCakes118

  • Size

    154KB

  • Sample

    240527-qz5eqaed51

  • MD5

    794af4687b6ce7be8bbdfad966370b50

  • SHA1

    2d089f1b182d5c8cd2194279fb56de861c4fd9dc

  • SHA256

    52588a67f8b1ed5f6551646ebbf41d49e91d4b625edd40d2ddd9e94850a5b00b

  • SHA512

    21a05c72df5a7cbacc7f110b1acf6f285711036052f32ca29537594200472dec01b9c7cc02c139df5c1b35488b678022a3e7b1151d2e0d8669116c3b016f6126

  • SSDEEP

    1536:iARTb/4EdGZ1EGn/YtlL4YCgFCjyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EXe:iq0ez47jyfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      794af4687b6ce7be8bbdfad966370b50_JaffaCakes118

    • Size

      154KB

    • MD5

      794af4687b6ce7be8bbdfad966370b50

    • SHA1

      2d089f1b182d5c8cd2194279fb56de861c4fd9dc

    • SHA256

      52588a67f8b1ed5f6551646ebbf41d49e91d4b625edd40d2ddd9e94850a5b00b

    • SHA512

      21a05c72df5a7cbacc7f110b1acf6f285711036052f32ca29537594200472dec01b9c7cc02c139df5c1b35488b678022a3e7b1151d2e0d8669116c3b016f6126

    • SSDEEP

      1536:iARTb/4EdGZ1EGn/YtlL4YCgFCjyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EXe:iq0ez47jyfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks