General

  • Target

    79eeec3fd575a1a119313d53457ac8dd_JaffaCakes118

  • Size

    530KB

  • Sample

    240527-v4592acg32

  • MD5

    79eeec3fd575a1a119313d53457ac8dd

  • SHA1

    02a79e7f81bd06da5ac5993c2ee2296bf69cc164

  • SHA256

    87b2dd08287912e4492698616edda04fa02d717efa95dc4e5dca1f78f6e90ab7

  • SHA512

    c9013488acae0c19a36280990c938ebb797081f5f4d03888cd14cfa29d45c5bdc17fe8a5130202f799f3c4aa404568399f7651a05df52f03ba90ee3307332b04

  • SSDEEP

    6144:S5sMYod+X3oI+Y7meFekJsMYod+X3oI+Y7meFeklsMYod+X3oI+Y7meFekw:g5d+X30ep5d+X30el5d+X30eE

Malware Config

Targets

    • Target

      79eeec3fd575a1a119313d53457ac8dd_JaffaCakes118

    • Size

      530KB

    • MD5

      79eeec3fd575a1a119313d53457ac8dd

    • SHA1

      02a79e7f81bd06da5ac5993c2ee2296bf69cc164

    • SHA256

      87b2dd08287912e4492698616edda04fa02d717efa95dc4e5dca1f78f6e90ab7

    • SHA512

      c9013488acae0c19a36280990c938ebb797081f5f4d03888cd14cfa29d45c5bdc17fe8a5130202f799f3c4aa404568399f7651a05df52f03ba90ee3307332b04

    • SSDEEP

      6144:S5sMYod+X3oI+Y7meFekJsMYod+X3oI+Y7meFeklsMYod+X3oI+Y7meFekw:g5d+X30ep5d+X30el5d+X30eE

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks