General

  • Target

    794a98fb30d467767d0cabd3bf60c6d8_JaffaCakes118

  • Size

    157KB

  • Sample

    240527-qznf7sed5s

  • MD5

    794a98fb30d467767d0cabd3bf60c6d8

  • SHA1

    c852a7fefb1eca7e9cf1979ee7e7437d81dca390

  • SHA256

    24a788911a707a13cb0473698aca3a5b19b818b1709338fe5650d72a23f1f950

  • SHA512

    683f1bac3e2e11ebc56e779c878ce107bbb2ca6223a55eeec4e2deb7f279cfa1629011b4528b2bd6efec21774fb78d47d6b802ea701886d421b5614869c33055

  • SSDEEP

    1536:iQRTv4FWEx7SJdyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrk:i68GJdyfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      794a98fb30d467767d0cabd3bf60c6d8_JaffaCakes118

    • Size

      157KB

    • MD5

      794a98fb30d467767d0cabd3bf60c6d8

    • SHA1

      c852a7fefb1eca7e9cf1979ee7e7437d81dca390

    • SHA256

      24a788911a707a13cb0473698aca3a5b19b818b1709338fe5650d72a23f1f950

    • SHA512

      683f1bac3e2e11ebc56e779c878ce107bbb2ca6223a55eeec4e2deb7f279cfa1629011b4528b2bd6efec21774fb78d47d6b802ea701886d421b5614869c33055

    • SSDEEP

      1536:iQRTv4FWEx7SJdyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrk:i68GJdyfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks