General

  • Target

    a49a317d030b3e3b430449fcd91b14f0_JaffaCakes118

  • Size

    175KB

  • Sample

    240613-j89bpsvcnm

  • MD5

    a49a317d030b3e3b430449fcd91b14f0

  • SHA1

    c55c782e94b87714a8d3d40805d4c18fbd0f7e66

  • SHA256

    93cb819a7c008aca2531e1b26747f4e6f362bc0e85036ab94457abfb068fd548

  • SHA512

    cf60b1b52b85bfb5ec93d4ecc3205d05f54a627295e66e0800e943931053024522062ea6cb007ebb8cc0e36da2a5afb74bb696399778bca2740f67d97ab7658c

  • SSDEEP

    3072:S2yfkMY+BES09JXAnyrZalI+Y5N86QwUdedbFilfO5YFiM:SzsMYod+X3oI+Yn86/U9jFiM

Malware Config

Targets

    • Target

      a49a317d030b3e3b430449fcd91b14f0_JaffaCakes118

    • Size

      175KB

    • MD5

      a49a317d030b3e3b430449fcd91b14f0

    • SHA1

      c55c782e94b87714a8d3d40805d4c18fbd0f7e66

    • SHA256

      93cb819a7c008aca2531e1b26747f4e6f362bc0e85036ab94457abfb068fd548

    • SHA512

      cf60b1b52b85bfb5ec93d4ecc3205d05f54a627295e66e0800e943931053024522062ea6cb007ebb8cc0e36da2a5afb74bb696399778bca2740f67d97ab7658c

    • SSDEEP

      3072:S2yfkMY+BES09JXAnyrZalI+Y5N86QwUdedbFilfO5YFiM:SzsMYod+X3oI+Yn86/U9jFiM

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks