General

  • Target

    79b42c9bcd7d20be7d118ec1afa20201_JaffaCakes118

  • Size

    156KB

  • Sample

    240527-tptf9ahh8t

  • MD5

    79b42c9bcd7d20be7d118ec1afa20201

  • SHA1

    58a80d64bbf00e9424b4a2a9662c3521ece2198b

  • SHA256

    d71991c016ab25016f56136eb4743d570a87d90ee1522a3a45c06aa6f1a1036f

  • SHA512

    f4d47dbee85482da6175a1447bd682e98586153c9887230c15741474b05d772b5fd832732c8ee813468d138912c7f81c6f68e85b926b632ade3d1075d2371c9f

  • SSDEEP

    1536:ikRToGs6xR5NVn8YoIyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXAZ:iW15UYoIyfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      79b42c9bcd7d20be7d118ec1afa20201_JaffaCakes118

    • Size

      156KB

    • MD5

      79b42c9bcd7d20be7d118ec1afa20201

    • SHA1

      58a80d64bbf00e9424b4a2a9662c3521ece2198b

    • SHA256

      d71991c016ab25016f56136eb4743d570a87d90ee1522a3a45c06aa6f1a1036f

    • SHA512

      f4d47dbee85482da6175a1447bd682e98586153c9887230c15741474b05d772b5fd832732c8ee813468d138912c7f81c6f68e85b926b632ade3d1075d2371c9f

    • SSDEEP

      1536:ikRToGs6xR5NVn8YoIyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXAZ:iW15UYoIyfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks