General

  • Target

    a3a016127320d1e11319eb83e9a5b0d2_JaffaCakes118

  • Size

    347KB

  • Sample

    240613-dl3yhsscpg

  • MD5

    a3a016127320d1e11319eb83e9a5b0d2

  • SHA1

    f793c3f5f282a28dbe4946e29479278c054376d5

  • SHA256

    3952240dd86c3f43ee4fad8d485d4cd7b92d8fac4c1cf4a9d65dde2fe0a59724

  • SHA512

    691b746240123ac8496b9c80d52861af07f224447fb3534713d43f60a8ebff90b3c4f13ce9588bcb2338f08187871b96677c415ce1504bab601edb33cb7135b0

  • SSDEEP

    6144:1sMYod+X3oI+Ym0sMYod+X3oI+Y5sMYod+X3oI+YQ:h5d+X3sC5d+X3f5d+X3+

Malware Config

Targets

    • Target

      a3a016127320d1e11319eb83e9a5b0d2_JaffaCakes118

    • Size

      347KB

    • MD5

      a3a016127320d1e11319eb83e9a5b0d2

    • SHA1

      f793c3f5f282a28dbe4946e29479278c054376d5

    • SHA256

      3952240dd86c3f43ee4fad8d485d4cd7b92d8fac4c1cf4a9d65dde2fe0a59724

    • SHA512

      691b746240123ac8496b9c80d52861af07f224447fb3534713d43f60a8ebff90b3c4f13ce9588bcb2338f08187871b96677c415ce1504bab601edb33cb7135b0

    • SSDEEP

      6144:1sMYod+X3oI+Ym0sMYod+X3oI+Y5sMYod+X3oI+YQ:h5d+X3sC5d+X3f5d+X3+

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks