General

  • Target

    ace89e9106b442f0262eea661e5ebb0f_JaffaCakes118

  • Size

    2.3MB

  • Sample

    240615-faq6pashnp

  • MD5

    ace89e9106b442f0262eea661e5ebb0f

  • SHA1

    d92f028e414af7c54829d76b325e2ff1f0eab713

  • SHA256

    0a140ed3d010dbb4b11707a241d8c50929f79e3b212f94b4588e0f7df06d0159

  • SHA512

    b3c6cc9c61469eb36b97bca89b655b0cb879190555b86d348638be9ee5f146ec8a035efb9f118091d6913d5b86d874c696ae03fda6b08ce9c3c0b8e23d6b91df

  • SSDEEP

    24576:V+Wt9BJ+Wt9Bq+Wt9BM+Wt9BM+Wt9Bt+Wt9B1+Wt9B5+Wt9Bi+Wt9BX+Wt9Bz+W2:y

Malware Config

Targets

    • Target

      ace89e9106b442f0262eea661e5ebb0f_JaffaCakes118

    • Size

      2.3MB

    • MD5

      ace89e9106b442f0262eea661e5ebb0f

    • SHA1

      d92f028e414af7c54829d76b325e2ff1f0eab713

    • SHA256

      0a140ed3d010dbb4b11707a241d8c50929f79e3b212f94b4588e0f7df06d0159

    • SHA512

      b3c6cc9c61469eb36b97bca89b655b0cb879190555b86d348638be9ee5f146ec8a035efb9f118091d6913d5b86d874c696ae03fda6b08ce9c3c0b8e23d6b91df

    • SSDEEP

      24576:V+Wt9BJ+Wt9Bq+Wt9BM+Wt9BM+Wt9Bt+Wt9B1+Wt9B5+Wt9Bi+Wt9BX+Wt9Bz+W2:y

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks