General

  • Target

    a41e112ffd0fe92e263afd7d75b5103d_JaffaCakes118

  • Size

    151KB

  • Sample

    240613-gtg8kawhpf

  • MD5

    a41e112ffd0fe92e263afd7d75b5103d

  • SHA1

    ab569b627a91e80ce103b24007e919798dcc2737

  • SHA256

    2daa1df31c13d2301ce5e7102bbd9ebb50cbc10c6998461dd7d2ec5c36794c23

  • SHA512

    4050032f92d6926501ce17dd51ce1cf4c4b4d36733186390942b8d16530c753db4fd0ca9cfd064d6a1e52fa65222e344e77254b677ad87b37abae2f0b1143577

  • SSDEEP

    1536:iORT93AJGmnjyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusG:iEFeNnjyfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      a41e112ffd0fe92e263afd7d75b5103d_JaffaCakes118

    • Size

      151KB

    • MD5

      a41e112ffd0fe92e263afd7d75b5103d

    • SHA1

      ab569b627a91e80ce103b24007e919798dcc2737

    • SHA256

      2daa1df31c13d2301ce5e7102bbd9ebb50cbc10c6998461dd7d2ec5c36794c23

    • SHA512

      4050032f92d6926501ce17dd51ce1cf4c4b4d36733186390942b8d16530c753db4fd0ca9cfd064d6a1e52fa65222e344e77254b677ad87b37abae2f0b1143577

    • SSDEEP

      1536:iORT93AJGmnjyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusG:iEFeNnjyfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks