General

  • Target

    a3ea41022751de0937c5de53490aaac0_JaffaCakes118

  • Size

    124KB

  • Sample

    240613-frda6ayfkp

  • MD5

    a3ea41022751de0937c5de53490aaac0

  • SHA1

    8cc94f0a641eb89dd3c847e3b265626c79cb02b0

  • SHA256

    1f3ff7ac78825f60c4ebe0dcb6f6fce4bb9b6d55099cada49270c6fbd46f9a01

  • SHA512

    0d8b3d43d3c4afc834ccc856f7f1c5a1d783778033f0bbb342ff9dc0f7066274503aa15bd8f272f80b9b184700dc68459ba0c00a848fd320127d2743c6da0748

  • SSDEEP

    3072:nzh0DeVyuJWwTCjkTG0yfkMY+BES09JXAnyrZalI+YQ:nzh0DeVyuJWwTCjkTG5sMYod+X3oI+YQ

Malware Config

Targets

    • Target

      a3ea41022751de0937c5de53490aaac0_JaffaCakes118

    • Size

      124KB

    • MD5

      a3ea41022751de0937c5de53490aaac0

    • SHA1

      8cc94f0a641eb89dd3c847e3b265626c79cb02b0

    • SHA256

      1f3ff7ac78825f60c4ebe0dcb6f6fce4bb9b6d55099cada49270c6fbd46f9a01

    • SHA512

      0d8b3d43d3c4afc834ccc856f7f1c5a1d783778033f0bbb342ff9dc0f7066274503aa15bd8f272f80b9b184700dc68459ba0c00a848fd320127d2743c6da0748

    • SSDEEP

      3072:nzh0DeVyuJWwTCjkTG0yfkMY+BES09JXAnyrZalI+YQ:nzh0DeVyuJWwTCjkTG5sMYod+X3oI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks