General

  • Target

    ac292e7fd605786a63cb3ff7d7d4d9b5_JaffaCakes118

  • Size

    156KB

  • Sample

    240615-afd6essaqa

  • MD5

    ac292e7fd605786a63cb3ff7d7d4d9b5

  • SHA1

    d4cdfcb65a40c1f2d9f4fc338c903edcce0eb401

  • SHA256

    2c27a4ab7ce0fad63f6b349d12d42d592318d9d429a2b7cca943a991a440d0a2

  • SHA512

    d0b61cc5da5c3fc2d20d782776e034e5cf4bc2aaf6ba4f3de80e6524237a74b72b3af2012b42094db2f647fa1000acf760f6a6a4861a85663ac4acb6d2c11c6c

  • SSDEEP

    3072:iiMSma1S0syfkMY+BES09JXAnyrZalI+YQ:izeRsMYod+X3oI+YQ

Malware Config

Targets

    • Target

      ac292e7fd605786a63cb3ff7d7d4d9b5_JaffaCakes118

    • Size

      156KB

    • MD5

      ac292e7fd605786a63cb3ff7d7d4d9b5

    • SHA1

      d4cdfcb65a40c1f2d9f4fc338c903edcce0eb401

    • SHA256

      2c27a4ab7ce0fad63f6b349d12d42d592318d9d429a2b7cca943a991a440d0a2

    • SHA512

      d0b61cc5da5c3fc2d20d782776e034e5cf4bc2aaf6ba4f3de80e6524237a74b72b3af2012b42094db2f647fa1000acf760f6a6a4861a85663ac4acb6d2c11c6c

    • SSDEEP

      3072:iiMSma1S0syfkMY+BES09JXAnyrZalI+YQ:izeRsMYod+X3oI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks