General

  • Target

    79df7209c0ab4648e52cb4154688bd66_JaffaCakes118

  • Size

    924KB

  • Sample

    240527-vr4wfabc5z

  • MD5

    79df7209c0ab4648e52cb4154688bd66

  • SHA1

    51c1e323a42b35e709f63daed9d503d7e1cdc5da

  • SHA256

    9c232589bf4270ff7fe2704ce41e5fac081701663cb80bfe2e21dc282437fc53

  • SHA512

    c13839b61281f87ade7f944769f1d734b3dba29d64594e9693c5eb507fc2f950b956e90b6ef3241688f1c83c5458f9c8ad30c177b6cf30b3a5d2d6a82116e467

  • SSDEEP

    12288:b5d+X3poCPuzmrugwG2qH5d+X3poCPuzmrugwG2qz:T+aDHs1+aDHs1

Malware Config

Targets

    • Target

      79df7209c0ab4648e52cb4154688bd66_JaffaCakes118

    • Size

      924KB

    • MD5

      79df7209c0ab4648e52cb4154688bd66

    • SHA1

      51c1e323a42b35e709f63daed9d503d7e1cdc5da

    • SHA256

      9c232589bf4270ff7fe2704ce41e5fac081701663cb80bfe2e21dc282437fc53

    • SHA512

      c13839b61281f87ade7f944769f1d734b3dba29d64594e9693c5eb507fc2f950b956e90b6ef3241688f1c83c5458f9c8ad30c177b6cf30b3a5d2d6a82116e467

    • SSDEEP

      12288:b5d+X3poCPuzmrugwG2qH5d+X3poCPuzmrugwG2qz:T+aDHs1+aDHs1

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks