General

  • Target

    a99d1d273ba941e25696f5035b8ef177_JaffaCakes118

  • Size

    180KB

  • Sample

    240614-pdtknazfna

  • MD5

    a99d1d273ba941e25696f5035b8ef177

  • SHA1

    5eb2db809446aab160d30e778f37618119692c9f

  • SHA256

    c23ebf127a2eba83d86b6be6f47838b2de242ba981c2066cd4c40d52ee44a1b6

  • SHA512

    3aeae3c2bf149b10b48664624244889177f8f5dea5881aa5847b172580228bdae43a9f0dd8fa80362ed60ca9df542375475becff2783c55cfe14ac9a5d47acb7

  • SSDEEP

    3072:ra90M9Y1cW/sVy74xOMyfkMY+BES09JXAnyrZalI+YQ:ra99mCW/sVy74xOxsMYod+X3oI+YQ

Malware Config

Targets

    • Target

      a99d1d273ba941e25696f5035b8ef177_JaffaCakes118

    • Size

      180KB

    • MD5

      a99d1d273ba941e25696f5035b8ef177

    • SHA1

      5eb2db809446aab160d30e778f37618119692c9f

    • SHA256

      c23ebf127a2eba83d86b6be6f47838b2de242ba981c2066cd4c40d52ee44a1b6

    • SHA512

      3aeae3c2bf149b10b48664624244889177f8f5dea5881aa5847b172580228bdae43a9f0dd8fa80362ed60ca9df542375475becff2783c55cfe14ac9a5d47acb7

    • SSDEEP

      3072:ra90M9Y1cW/sVy74xOMyfkMY+BES09JXAnyrZalI+YQ:ra99mCW/sVy74xOxsMYod+X3oI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks