General

  • Target

    a4b5feb3b0b56d47f0485e50ae1093b9_JaffaCakes118

  • Size

    129KB

  • Sample

    240613-kr3cha1hld

  • MD5

    a4b5feb3b0b56d47f0485e50ae1093b9

  • SHA1

    27ddc21e424b9a1d5843aabd48d5d69f8ccc5816

  • SHA256

    1b9a139193c1877d7847fc4e5b6d256dc6814b01fa07d305d1899ba51ef08302

  • SHA512

    d1daaaee88b41cec37b4df3a0426173b305e7ebc8ba66f6fe60268ced4dd80bf8cc5e018b87a9e37b656ee8b0af103a8719e18debaf30b4f57d24024d4cc84be

  • SSDEEP

    1536:THchmc+8lyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOZ:THch5+8lyfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      a4b5feb3b0b56d47f0485e50ae1093b9_JaffaCakes118

    • Size

      129KB

    • MD5

      a4b5feb3b0b56d47f0485e50ae1093b9

    • SHA1

      27ddc21e424b9a1d5843aabd48d5d69f8ccc5816

    • SHA256

      1b9a139193c1877d7847fc4e5b6d256dc6814b01fa07d305d1899ba51ef08302

    • SHA512

      d1daaaee88b41cec37b4df3a0426173b305e7ebc8ba66f6fe60268ced4dd80bf8cc5e018b87a9e37b656ee8b0af103a8719e18debaf30b4f57d24024d4cc84be

    • SSDEEP

      1536:THchmc+8lyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOZ:THch5+8lyfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks