General

  • Target

    ac406c6180e6d04f1f6f92bd5ee93e56_JaffaCakes118

  • Size

    137KB

  • Sample

    240615-axt8zasfrc

  • MD5

    ac406c6180e6d04f1f6f92bd5ee93e56

  • SHA1

    05eba01bd9a6129e773514c54b40dca93c173bb5

  • SHA256

    8fd937ae550873d2643522ce1c71fb12a685e07ca7fd41573cd1dbcd1eac9925

  • SHA512

    89ba6069845ae1c6cf6121a8e5381e1bb04d93973ba7b302d3fa8b1b0741c420358a5431e63dcff699439fe05e1af36d7955ee3667b5dcb4d69f793113bcc3d5

  • SSDEEP

    1536:S4Ms+EVSOdzQd6Pb2lYlJlqigalM6NyLi+rffMxqNisaQx4V5roEIfGJZN8qbV7e:SSyfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      ac406c6180e6d04f1f6f92bd5ee93e56_JaffaCakes118

    • Size

      137KB

    • MD5

      ac406c6180e6d04f1f6f92bd5ee93e56

    • SHA1

      05eba01bd9a6129e773514c54b40dca93c173bb5

    • SHA256

      8fd937ae550873d2643522ce1c71fb12a685e07ca7fd41573cd1dbcd1eac9925

    • SHA512

      89ba6069845ae1c6cf6121a8e5381e1bb04d93973ba7b302d3fa8b1b0741c420358a5431e63dcff699439fe05e1af36d7955ee3667b5dcb4d69f793113bcc3d5

    • SSDEEP

      1536:S4Ms+EVSOdzQd6Pb2lYlJlqigalM6NyLi+rffMxqNisaQx4V5roEIfGJZN8qbV7e:SSyfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks