General

  • Target

    a15eb61e32505547df241256987502c2_JaffaCakes118

  • Size

    459KB

  • Sample

    240612-t6qrpawamq

  • MD5

    a15eb61e32505547df241256987502c2

  • SHA1

    a96bb733af4603cb5db4263c81ed0bd31c1df697

  • SHA256

    8aba23d05726a8565d967ce6660bef5ba2e436a9d23c1e1cf5049b2949c0ff77

  • SHA512

    d6088804ac5c0fc596aab97970c2cbb9adad9ad2363b64dbea6a800f18d0e49f7de5a4ef18f855321de13203fff39e22b2c8c6f4aa973b87395e9e8f71d0e5e0

  • SSDEEP

    6144:S5sMYod+X3oI+YEsMYod+X3oI+YssMYod+X3oI+YssMYod+X3oI+YGj:Y5d+X3I5d+X3Q5d+X3A5d+X3Aj

Malware Config

Targets

    • Target

      a15eb61e32505547df241256987502c2_JaffaCakes118

    • Size

      459KB

    • MD5

      a15eb61e32505547df241256987502c2

    • SHA1

      a96bb733af4603cb5db4263c81ed0bd31c1df697

    • SHA256

      8aba23d05726a8565d967ce6660bef5ba2e436a9d23c1e1cf5049b2949c0ff77

    • SHA512

      d6088804ac5c0fc596aab97970c2cbb9adad9ad2363b64dbea6a800f18d0e49f7de5a4ef18f855321de13203fff39e22b2c8c6f4aa973b87395e9e8f71d0e5e0

    • SSDEEP

      6144:S5sMYod+X3oI+YEsMYod+X3oI+YssMYod+X3oI+YssMYod+X3oI+YGj:Y5d+X3I5d+X3Q5d+X3A5d+X3Aj

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Tasks