General

  • Target

    a978b5c14102cb10001873124b71eaf1_JaffaCakes118

  • Size

    156KB

  • Sample

    240614-nqscpayfqh

  • MD5

    a978b5c14102cb10001873124b71eaf1

  • SHA1

    52f1262e520f608b3a4d24e10874e2eaeea9d5ca

  • SHA256

    2bc12194a577e7a6c3fee1a5eed234a40846fafccf465f4fcbe61761d47341a1

  • SHA512

    e176aa548fa03a0050290ade5c75b9a24068eb04ef912c1bf77d6a021d17ae605ecc26c11caec77aaab431d065a4696c36861f5f71455d7ec570f10e01b68424

  • SSDEEP

    1536:i9RT9Wnv8U0KL5u4R1lyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXu:iby8g/1lyfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      a978b5c14102cb10001873124b71eaf1_JaffaCakes118

    • Size

      156KB

    • MD5

      a978b5c14102cb10001873124b71eaf1

    • SHA1

      52f1262e520f608b3a4d24e10874e2eaeea9d5ca

    • SHA256

      2bc12194a577e7a6c3fee1a5eed234a40846fafccf465f4fcbe61761d47341a1

    • SHA512

      e176aa548fa03a0050290ade5c75b9a24068eb04ef912c1bf77d6a021d17ae605ecc26c11caec77aaab431d065a4696c36861f5f71455d7ec570f10e01b68424

    • SSDEEP

      1536:i9RT9Wnv8U0KL5u4R1lyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXu:iby8g/1lyfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks