General

  • Target

    a390ec7a80f219ba0d5205ea163ff004_JaffaCakes118

  • Size

    176KB

  • Sample

    240613-c6geksvfnm

  • MD5

    a390ec7a80f219ba0d5205ea163ff004

  • SHA1

    f1e31666975e074582863bf3e310e4568f27206e

  • SHA256

    201cd1d3af6f7d5360086fc3566c0d05c8cc8cda736cf323dfa73d91e9477545

  • SHA512

    3270e34bd603dca9ba6420ae2e49a773d7d680fda79ad9d446d33e205f10be2da95174f959b9a85c80af8d33a56bee8924c2b54b91ee5b517d048c551aa4d7ee

  • SSDEEP

    3072:STSyfkMY+BES09JXAnyrZalI+Y5N86QwUdedbFilfO5YFiM:STXsMYod+X3oI+Yn86/U9jFiM

Malware Config

Targets

    • Target

      a390ec7a80f219ba0d5205ea163ff004_JaffaCakes118

    • Size

      176KB

    • MD5

      a390ec7a80f219ba0d5205ea163ff004

    • SHA1

      f1e31666975e074582863bf3e310e4568f27206e

    • SHA256

      201cd1d3af6f7d5360086fc3566c0d05c8cc8cda736cf323dfa73d91e9477545

    • SHA512

      3270e34bd603dca9ba6420ae2e49a773d7d680fda79ad9d446d33e205f10be2da95174f959b9a85c80af8d33a56bee8924c2b54b91ee5b517d048c551aa4d7ee

    • SSDEEP

      3072:STSyfkMY+BES09JXAnyrZalI+Y5N86QwUdedbFilfO5YFiM:STXsMYod+X3oI+Yn86/U9jFiM

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks