General

  • Target

    a15ecc64d2c01544e06784a03a07ea11_JaffaCakes118

  • Size

    523KB

  • Sample

    240612-t6sahswamr

  • MD5

    a15ecc64d2c01544e06784a03a07ea11

  • SHA1

    c98e7c10b09f2965ad47a5c251bcaae1a49b06c9

  • SHA256

    09876fabd4a36cfeed7f9384f16bb3359697276414726e2c76971a75f76511ca

  • SHA512

    765d2ebc56eec8f1af9dd60579feee15a766823cb49f4cd19fdf26a794a2c5c7fbd1603469ddb0d6ba13f9afc617aeec6d7de7fc1a9dc0f3b5a39079d3b06561

  • SSDEEP

    6144:SncsMYod+X3oI+YGVsjVlHsMYod+X3oI+YGVsjVRsMYod+X3oI+YGVsjVP:MK5d+X3zjVlr5d+X3zjVd5d+X3zjVP

Malware Config

Targets

    • Target

      a15ecc64d2c01544e06784a03a07ea11_JaffaCakes118

    • Size

      523KB

    • MD5

      a15ecc64d2c01544e06784a03a07ea11

    • SHA1

      c98e7c10b09f2965ad47a5c251bcaae1a49b06c9

    • SHA256

      09876fabd4a36cfeed7f9384f16bb3359697276414726e2c76971a75f76511ca

    • SHA512

      765d2ebc56eec8f1af9dd60579feee15a766823cb49f4cd19fdf26a794a2c5c7fbd1603469ddb0d6ba13f9afc617aeec6d7de7fc1a9dc0f3b5a39079d3b06561

    • SSDEEP

      6144:SncsMYod+X3oI+YGVsjVlHsMYod+X3oI+YGVsjVRsMYod+X3oI+YGVsjVP:MK5d+X3zjVlr5d+X3zjVd5d+X3zjVP

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks