General

  • Target

    ad0f9f3981245d300e6020327877a694_JaffaCakes118

  • Size

    672KB

  • Sample

    240615-gjx62atgmq

  • MD5

    ad0f9f3981245d300e6020327877a694

  • SHA1

    40e1407f9b186edf12c4d84ac9d34b55353b06ec

  • SHA256

    f26ed19396a14878879b1210b25ffac154cb76ef63a2fcd14853c00847466c3e

  • SHA512

    1db9fa773e090026e3c076f4082f9284bd4eb5b4a11f195777a6df9d36c6e03ad47e9a40caf069dc04d7f56ea22a0c57910b0a5ff2f92c68de9c2d5dd0ec7c3b

  • SSDEEP

    12288:n5d+X3Q5d+X3N5d+X3p5d+X3Q5d+X3f5d+X3+:X+K+R+F+K+P+e

Malware Config

Targets

    • Target

      ad0f9f3981245d300e6020327877a694_JaffaCakes118

    • Size

      672KB

    • MD5

      ad0f9f3981245d300e6020327877a694

    • SHA1

      40e1407f9b186edf12c4d84ac9d34b55353b06ec

    • SHA256

      f26ed19396a14878879b1210b25ffac154cb76ef63a2fcd14853c00847466c3e

    • SHA512

      1db9fa773e090026e3c076f4082f9284bd4eb5b4a11f195777a6df9d36c6e03ad47e9a40caf069dc04d7f56ea22a0c57910b0a5ff2f92c68de9c2d5dd0ec7c3b

    • SSDEEP

      12288:n5d+X3Q5d+X3N5d+X3p5d+X3Q5d+X3f5d+X3+:X+K+R+F+K+P+e

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks