General

  • Target

    a3ced4858782782ad40432e0f25f0f16_JaffaCakes118

  • Size

    196KB

  • Sample

    240613-ey1vcsxfmp

  • MD5

    a3ced4858782782ad40432e0f25f0f16

  • SHA1

    0403023822ac8c8536bc6250cf1de0bda3614411

  • SHA256

    cf38874cc495f97edafa7a26bcaad048d9f50d7ea90274916ad28e484f344717

  • SHA512

    0451e2b6e80057d6336aaec0b16a0bc8bd87b0eef3fb795ceb56e47cdfaf7e2dc93d68465e990b6ce80c6a3740a46d0848bb72abdce404c832d7f075a2de03af

  • SSDEEP

    3072:tHlJtWXbuAxyfkMY+BES09JXAnyrZalI+YIms3rEJuodjoh:KXbuA0sMYod+X3oI+YN+EJXdoh

Malware Config

Targets

    • Target

      a3ced4858782782ad40432e0f25f0f16_JaffaCakes118

    • Size

      196KB

    • MD5

      a3ced4858782782ad40432e0f25f0f16

    • SHA1

      0403023822ac8c8536bc6250cf1de0bda3614411

    • SHA256

      cf38874cc495f97edafa7a26bcaad048d9f50d7ea90274916ad28e484f344717

    • SHA512

      0451e2b6e80057d6336aaec0b16a0bc8bd87b0eef3fb795ceb56e47cdfaf7e2dc93d68465e990b6ce80c6a3740a46d0848bb72abdce404c832d7f075a2de03af

    • SSDEEP

      3072:tHlJtWXbuAxyfkMY+BES09JXAnyrZalI+YIms3rEJuodjoh:KXbuA0sMYod+X3oI+YN+EJXdoh

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks