General

  • Target

    ac9861da3b0882a5b353cd9020d70dba_JaffaCakes118

  • Size

    186KB

  • Sample

    240615-cznkbazepl

  • MD5

    ac9861da3b0882a5b353cd9020d70dba

  • SHA1

    38c68136d8daee35378eac4799f599e0f47ac318

  • SHA256

    7a3f7be708f8945ed90a3081807da4891a0b8dafe90c7382e6c82e4349ef6f0f

  • SHA512

    d4156684f8b02b51f7724f0febb3c1a9442935a72834ff272d89554a751152aaad3a162b823406c65408d946696ea6527c0d6ef3e04c83dd2dfa41131ede17ae

  • SSDEEP

    3072:SnPyfkMY+BES09JXAnyrZalI+Y5N86QwUdedbFilfO5YFiM:SnasMYod+X3oI+Yn86/U9jFiM

Malware Config

Targets

    • Target

      ac9861da3b0882a5b353cd9020d70dba_JaffaCakes118

    • Size

      186KB

    • MD5

      ac9861da3b0882a5b353cd9020d70dba

    • SHA1

      38c68136d8daee35378eac4799f599e0f47ac318

    • SHA256

      7a3f7be708f8945ed90a3081807da4891a0b8dafe90c7382e6c82e4349ef6f0f

    • SHA512

      d4156684f8b02b51f7724f0febb3c1a9442935a72834ff272d89554a751152aaad3a162b823406c65408d946696ea6527c0d6ef3e04c83dd2dfa41131ede17ae

    • SSDEEP

      3072:SnPyfkMY+BES09JXAnyrZalI+Y5N86QwUdedbFilfO5YFiM:SnasMYod+X3oI+Yn86/U9jFiM

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks