General

  • Target

    a112bf319d9c0632fd67f49f0c386a8a_JaffaCakes118

  • Size

    3.8MB

  • Sample

    240612-sc5s3stajr

  • MD5

    a112bf319d9c0632fd67f49f0c386a8a

  • SHA1

    9845d84070bd9f99e9f3d96f8a1704a3e7b198c9

  • SHA256

    702c47d8957240ecd9077f5349392f312af513b1b8fc4e1de95dd5866dc93443

  • SHA512

    70a05e16e120e221190a06d4ac5dd1f5c07485dd101dcf86771eaf813de4f0d97096c905d55fa3ba7cb17a3d8617a9f02683c245e1ef20cc47b092933ed4553e

  • SSDEEP

    98304:AspuKt4QVdsospmRj//Ekl/Am9r66pqAJvyVUVh:X3Biepqev7

Malware Config

Targets

    • Target

      a112bf319d9c0632fd67f49f0c386a8a_JaffaCakes118

    • Size

      3.8MB

    • MD5

      a112bf319d9c0632fd67f49f0c386a8a

    • SHA1

      9845d84070bd9f99e9f3d96f8a1704a3e7b198c9

    • SHA256

      702c47d8957240ecd9077f5349392f312af513b1b8fc4e1de95dd5866dc93443

    • SHA512

      70a05e16e120e221190a06d4ac5dd1f5c07485dd101dcf86771eaf813de4f0d97096c905d55fa3ba7cb17a3d8617a9f02683c245e1ef20cc47b092933ed4553e

    • SSDEEP

      98304:AspuKt4QVdsospmRj//Ekl/Am9r66pqAJvyVUVh:X3Biepqev7

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

System Information Discovery

1
T1082

Tasks