General

  • Target

    ad30123124f7104e6beec4d3f051a270_JaffaCakes118

  • Size

    158KB

  • Sample

    240615-hbw5fa1drg

  • MD5

    ad30123124f7104e6beec4d3f051a270

  • SHA1

    80d48951fa74f8792a0aa6e6f4a3d7a653fb362c

  • SHA256

    641c7d115e8c6ce75d53d231811c6f43b4672a3ed63a1a33e330d12f2d68e2ea

  • SHA512

    34b8c00cce9f156dd633d1e178a1695bcc20d2853d2b7ddf27a50dd08fc1559e659a4b3e98665063a29efc6ab8faa98b61033f53a4fd54a1a537f9b54dc67b9c

  • SSDEEP

    1536:ieRTgIojlKRTm+X4yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3om:iUqgFX4yfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      ad30123124f7104e6beec4d3f051a270_JaffaCakes118

    • Size

      158KB

    • MD5

      ad30123124f7104e6beec4d3f051a270

    • SHA1

      80d48951fa74f8792a0aa6e6f4a3d7a653fb362c

    • SHA256

      641c7d115e8c6ce75d53d231811c6f43b4672a3ed63a1a33e330d12f2d68e2ea

    • SHA512

      34b8c00cce9f156dd633d1e178a1695bcc20d2853d2b7ddf27a50dd08fc1559e659a4b3e98665063a29efc6ab8faa98b61033f53a4fd54a1a537f9b54dc67b9c

    • SSDEEP

      1536:ieRTgIojlKRTm+X4yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3om:iUqgFX4yfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks