General

  • Target

    a9e2627170e96391f58969b36a453f96_JaffaCakes118

  • Size

    519KB

  • Sample

    240614-ql5hkasdlc

  • MD5

    a9e2627170e96391f58969b36a453f96

  • SHA1

    e7b45af537f1a7027e3212c4f963cb10264443f3

  • SHA256

    7dc6df549d899f0dea1a7543ffed3707650195f5abd9e5ed1276901aa3b1691e

  • SHA512

    5b8824566673e6f945716768f1ef7854aa63ceab7994c8e7b41cf339ff1616db59b4c35bd2535ee1722a7934234d0de76302e1c8b2050013aa95d952a4f67b88

  • SSDEEP

    6144:Sn7sMYod+X3oI+YGVsjVVksMYod+X3oI+YGVsjVdsMYod+X3oI+YGVsjVP:MP5d+X3zjVVy5d+X3zjVp5d+X3zjVP

Malware Config

Targets

    • Target

      a9e2627170e96391f58969b36a453f96_JaffaCakes118

    • Size

      519KB

    • MD5

      a9e2627170e96391f58969b36a453f96

    • SHA1

      e7b45af537f1a7027e3212c4f963cb10264443f3

    • SHA256

      7dc6df549d899f0dea1a7543ffed3707650195f5abd9e5ed1276901aa3b1691e

    • SHA512

      5b8824566673e6f945716768f1ef7854aa63ceab7994c8e7b41cf339ff1616db59b4c35bd2535ee1722a7934234d0de76302e1c8b2050013aa95d952a4f67b88

    • SSDEEP

      6144:Sn7sMYod+X3oI+YGVsjVVksMYod+X3oI+YGVsjVdsMYod+X3oI+YGVsjVP:MP5d+X3zjVVy5d+X3zjVp5d+X3zjVP

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks