General

  • Target

    a4bc65e7e2c27f1f92fe33ebbfb1b2d6_JaffaCakes118

  • Size

    154KB

  • Sample

    240613-kw1z8swblr

  • MD5

    a4bc65e7e2c27f1f92fe33ebbfb1b2d6

  • SHA1

    2f22c84347953baa5331b45cc77cfd0d41713c6a

  • SHA256

    a4f35310a227f8b511a7f8189a6fbd42faaa1f1b1502961ed653a4f63d05d266

  • SHA512

    383f2677a01021bfdbaea9958aa0b3bf7194ceb35a11ef16682089d3a87dd2b3d0fa44809d36378218bd18ab009ecf4dd4e82a48c24f68119376ed15e4d53dcd

  • SSDEEP

    1536:iYRTiPBfHez+myLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJruH:iSAlmyfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      a4bc65e7e2c27f1f92fe33ebbfb1b2d6_JaffaCakes118

    • Size

      154KB

    • MD5

      a4bc65e7e2c27f1f92fe33ebbfb1b2d6

    • SHA1

      2f22c84347953baa5331b45cc77cfd0d41713c6a

    • SHA256

      a4f35310a227f8b511a7f8189a6fbd42faaa1f1b1502961ed653a4f63d05d266

    • SHA512

      383f2677a01021bfdbaea9958aa0b3bf7194ceb35a11ef16682089d3a87dd2b3d0fa44809d36378218bd18ab009ecf4dd4e82a48c24f68119376ed15e4d53dcd

    • SSDEEP

      1536:iYRTiPBfHez+myLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJruH:iSAlmyfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks