General

  • Target

    a39a96ceb0f55fb1b4e819b83cd391f6_JaffaCakes118

  • Size

    182KB

  • Sample

    240613-df56pasblc

  • MD5

    a39a96ceb0f55fb1b4e819b83cd391f6

  • SHA1

    fab6e95f3f2e4623cd53a10a6a212db2c27f4281

  • SHA256

    1725c45db5d68b5d9cb86fffb1cb3837d80fcbcad0f092ec12ed8b50cb7eb373

  • SHA512

    d84c0255ca155f9c529aab0b43ccc9e86f0056e43abfcf127bf20c54bfbe8bbf5f2b57668a6e971e18a26a96a0d393723779b623c210125f548ccfd71792b339

  • SSDEEP

    3072:nAUU2F/6ijbwEayfkMY+BES09JXAnyrZalI+Y6XXI6EyA8:nAUFDsMYod+X3oI+YS1tA8

Malware Config

Targets

    • Target

      a39a96ceb0f55fb1b4e819b83cd391f6_JaffaCakes118

    • Size

      182KB

    • MD5

      a39a96ceb0f55fb1b4e819b83cd391f6

    • SHA1

      fab6e95f3f2e4623cd53a10a6a212db2c27f4281

    • SHA256

      1725c45db5d68b5d9cb86fffb1cb3837d80fcbcad0f092ec12ed8b50cb7eb373

    • SHA512

      d84c0255ca155f9c529aab0b43ccc9e86f0056e43abfcf127bf20c54bfbe8bbf5f2b57668a6e971e18a26a96a0d393723779b623c210125f548ccfd71792b339

    • SSDEEP

      3072:nAUU2F/6ijbwEayfkMY+BES09JXAnyrZalI+Y6XXI6EyA8:nAUFDsMYod+X3oI+YS1tA8

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks