General

  • Target

    aa227c7bd2104e259fdc35e51b97f07a_JaffaCakes118

  • Size

    174KB

  • Sample

    240614-rmgcssxgpn

  • MD5

    aa227c7bd2104e259fdc35e51b97f07a

  • SHA1

    400347d555c3926362e13835ae4d6f6f32bd2bb8

  • SHA256

    9f72a237e3a8d13eec8931b95e59ad4aa42b25f174349e95b85c6ea65524d165

  • SHA512

    40ae3a26234b65536eaa460670d9ba3910f6cc47bb92ac721610ccd487beca0ae3d04fce2147d29d40892e12da23e95a94acbf7eebd21bfd69bcf0c88d301f84

  • SSDEEP

    3072:SByfkMY+BES09JXAnyrZalI+Y5N86QwUdedbFilfO5YFiM:SEsMYod+X3oI+Yn86/U9jFiM

Malware Config

Targets

    • Target

      aa227c7bd2104e259fdc35e51b97f07a_JaffaCakes118

    • Size

      174KB

    • MD5

      aa227c7bd2104e259fdc35e51b97f07a

    • SHA1

      400347d555c3926362e13835ae4d6f6f32bd2bb8

    • SHA256

      9f72a237e3a8d13eec8931b95e59ad4aa42b25f174349e95b85c6ea65524d165

    • SHA512

      40ae3a26234b65536eaa460670d9ba3910f6cc47bb92ac721610ccd487beca0ae3d04fce2147d29d40892e12da23e95a94acbf7eebd21bfd69bcf0c88d301f84

    • SSDEEP

      3072:SByfkMY+BES09JXAnyrZalI+Y5N86QwUdedbFilfO5YFiM:SEsMYod+X3oI+Yn86/U9jFiM

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks