General

  • Target

    7a2660f31af20c614291653fa6566826_JaffaCakes118

  • Size

    156KB

  • Sample

    240527-xhdn1afb54

  • MD5

    7a2660f31af20c614291653fa6566826

  • SHA1

    faa84cc1165b96a8c5f19b3d56875fa5c1478421

  • SHA256

    b03ef728ce373f517371032dd0853832185a0c65ab0f9c3ac8b8ccef732abaf7

  • SHA512

    5ea5b64d93abc597919f9e3712b1858a8d68a5970be7a9f4cbe49ec5f1a5254fed29c63cc1f814175e5d15da7bce4b86a7221dc1266a2df89dfb9717cb031592

  • SSDEEP

    1536:ioRTk4byJicfnCVYyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3om:ii2US+YyfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      7a2660f31af20c614291653fa6566826_JaffaCakes118

    • Size

      156KB

    • MD5

      7a2660f31af20c614291653fa6566826

    • SHA1

      faa84cc1165b96a8c5f19b3d56875fa5c1478421

    • SHA256

      b03ef728ce373f517371032dd0853832185a0c65ab0f9c3ac8b8ccef732abaf7

    • SHA512

      5ea5b64d93abc597919f9e3712b1858a8d68a5970be7a9f4cbe49ec5f1a5254fed29c63cc1f814175e5d15da7bce4b86a7221dc1266a2df89dfb9717cb031592

    • SSDEEP

      1536:ioRTk4byJicfnCVYyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3om:ii2US+YyfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks