General

  • Target

    a9620b5a8ecd285252949eb86ae29f2b_JaffaCakes118

  • Size

    131KB

  • Sample

    240614-nctnlaybnc

  • MD5

    a9620b5a8ecd285252949eb86ae29f2b

  • SHA1

    9ea77f613b19e00565aca4f035867375bc7dd9e5

  • SHA256

    a364524f46db77c3dc768ee3d4754b11c0b58fe12fabdae41ac0ebcfa9cce14f

  • SHA512

    790a823df62a36736d59c0080dd9f4244aa118e4ab7f4fb7cc5341c8bcc8120a71f6e1200fa986e7d6775d785403773d8a35eda1a3cd4196decce91bd1d5375b

  • SSDEEP

    1536:SyFXfpIzr6yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTs:S6f6CyfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      a9620b5a8ecd285252949eb86ae29f2b_JaffaCakes118

    • Size

      131KB

    • MD5

      a9620b5a8ecd285252949eb86ae29f2b

    • SHA1

      9ea77f613b19e00565aca4f035867375bc7dd9e5

    • SHA256

      a364524f46db77c3dc768ee3d4754b11c0b58fe12fabdae41ac0ebcfa9cce14f

    • SHA512

      790a823df62a36736d59c0080dd9f4244aa118e4ab7f4fb7cc5341c8bcc8120a71f6e1200fa986e7d6775d785403773d8a35eda1a3cd4196decce91bd1d5375b

    • SSDEEP

      1536:SyFXfpIzr6yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTs:S6f6CyfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks