General

  • Target

    a3b9bf42e7d886d7a116c8b5b6ab3d30_JaffaCakes118

  • Size

    158KB

  • Sample

    240613-eb6gbstbla

  • MD5

    a3b9bf42e7d886d7a116c8b5b6ab3d30

  • SHA1

    ac507c34e6aa43865bf3a34ddca25962830282be

  • SHA256

    dffbe4735ed8893eb91d63c19edb2ab60ae8e485cd7500c922437647e038afa9

  • SHA512

    72f75ec76c3c196549f796063482f30d787d89d7f27d13957a5d0f7c363f3b71db97b8d8a0865354ad4310d9c43004d3687ff15a0f046219a5c79fdebd70685a

  • SSDEEP

    1536:iIRTULeJHWyl64P1u6yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXAZ:iCZ1u6yfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      a3b9bf42e7d886d7a116c8b5b6ab3d30_JaffaCakes118

    • Size

      158KB

    • MD5

      a3b9bf42e7d886d7a116c8b5b6ab3d30

    • SHA1

      ac507c34e6aa43865bf3a34ddca25962830282be

    • SHA256

      dffbe4735ed8893eb91d63c19edb2ab60ae8e485cd7500c922437647e038afa9

    • SHA512

      72f75ec76c3c196549f796063482f30d787d89d7f27d13957a5d0f7c363f3b71db97b8d8a0865354ad4310d9c43004d3687ff15a0f046219a5c79fdebd70685a

    • SSDEEP

      1536:iIRTULeJHWyl64P1u6yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXAZ:iCZ1u6yfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks