General

  • Target

    0e847997195f0ab7cb5cac40753602bf_JaffaCakes118

  • Size

    184KB

  • Sample

    240625-shffdazekk

  • MD5

    0e847997195f0ab7cb5cac40753602bf

  • SHA1

    dbda17e40f752472f6d6ce8e33ac40d7c6194dc5

  • SHA256

    e3cdb634c20ac60551e5986c50c9a928cb9cb57fe647d9fac72501466b44962e

  • SHA512

    a2615754df1b87ef36e7871717ca1d94ca67d0ad1a6c95fafaadb690aa8384dba167753eb2ee75909e9f65c3191f695afa8c4db52a81f0dbe5695a2044d6aaf0

  • SSDEEP

    3072:JIx0Hc0clgOJLCxk93L6poqkVQ/jsveUHqL+Q77m90fewJzw/nmnXoYdl:JI/xgoWcbEolVWsm1LH/ZZzwmn9

Malware Config

Targets

    • Target

      0e847997195f0ab7cb5cac40753602bf_JaffaCakes118

    • Size

      184KB

    • MD5

      0e847997195f0ab7cb5cac40753602bf

    • SHA1

      dbda17e40f752472f6d6ce8e33ac40d7c6194dc5

    • SHA256

      e3cdb634c20ac60551e5986c50c9a928cb9cb57fe647d9fac72501466b44962e

    • SHA512

      a2615754df1b87ef36e7871717ca1d94ca67d0ad1a6c95fafaadb690aa8384dba167753eb2ee75909e9f65c3191f695afa8c4db52a81f0dbe5695a2044d6aaf0

    • SSDEEP

      3072:JIx0Hc0clgOJLCxk93L6poqkVQ/jsveUHqL+Q77m90fewJzw/nmnXoYdl:JI/xgoWcbEolVWsm1LH/ZZzwmn9

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Drops file in System32 directory

    • Sets desktop wallpaper using registry

MITRE ATT&CK Enterprise v15

Tasks