General

  • Target

    a42156f8a864cece2aa64b59b3bfaccb_JaffaCakes118

  • Size

    924KB

  • Sample

    240613-gv8f5sxala

  • MD5

    a42156f8a864cece2aa64b59b3bfaccb

  • SHA1

    9db0ec7dd69bca222c2734fcef192e7aef57c48d

  • SHA256

    370c712d99e36b450bcdb73dd5deffc624b6414f0f71fe07a83e6a4910126dd5

  • SHA512

    30457f347fb8d879fbbcf3c58653fc356ee8dac8e6b52cf53dbb3c7a7aedcda49ee00980fd3db1672adf784d07d359b97f93f42a16a5bf43763f4f453cdb4b0f

  • SSDEEP

    12288:15d+X3poCPuzmrugwG2qH5d+X3poCPuzmrugwG2qz:Z+aDHs1+aDHs1

Malware Config

Targets

    • Target

      a42156f8a864cece2aa64b59b3bfaccb_JaffaCakes118

    • Size

      924KB

    • MD5

      a42156f8a864cece2aa64b59b3bfaccb

    • SHA1

      9db0ec7dd69bca222c2734fcef192e7aef57c48d

    • SHA256

      370c712d99e36b450bcdb73dd5deffc624b6414f0f71fe07a83e6a4910126dd5

    • SHA512

      30457f347fb8d879fbbcf3c58653fc356ee8dac8e6b52cf53dbb3c7a7aedcda49ee00980fd3db1672adf784d07d359b97f93f42a16a5bf43763f4f453cdb4b0f

    • SSDEEP

      12288:15d+X3poCPuzmrugwG2qH5d+X3poCPuzmrugwG2qz:Z+aDHs1+aDHs1

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks