Overview

overview

6

Static

static

3

025cd02644...18.exe

windows7-x64

6

025cd02644...18.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    025cd026448c2959e6d9d6df9abb01c5_JaffaCakes118

  • Size

    276KB

  • Sample

    240427-ef13eabc5x

  • MD5

    025cd026448c2959e6d9d6df9abb01c5

  • SHA1

    fdce4cf20b4b56ec9813a2e6deb6bd42398fe6ef

  • SHA256

    abaaf81a4519d27ad0d9083df40da994555f262c0b89a45193c5f94c7d534dd4

  • SHA512

    5fd08f32ecc01cf7fd99a6d6f264f063e06ec89b36e3024b84910a77069c81f3409a25a23064378e92197e2ede5fda6c6777305b74de93982fc7a91fae540ba0

  • SSDEEP

    3072:aPP3tGXRvjxCb5NgXDY7uSlkJcUa7kYQTcqW2NdQQGH/UDhSCUc4aqTBPL:WIlKgzelZNQSBQGH/CSpWqTx

Score
6/10
ransomware

Malware Config

Targets

    • Target

      025cd026448c2959e6d9d6df9abb01c5_JaffaCakes118

    • Size

      276KB

    • MD5

      025cd026448c2959e6d9d6df9abb01c5

    • SHA1

      fdce4cf20b4b56ec9813a2e6deb6bd42398fe6ef

    • SHA256

      abaaf81a4519d27ad0d9083df40da994555f262c0b89a45193c5f94c7d534dd4

    • SHA512

      5fd08f32ecc01cf7fd99a6d6f264f063e06ec89b36e3024b84910a77069c81f3409a25a23064378e92197e2ede5fda6c6777305b74de93982fc7a91fae540ba0

    • SSDEEP

      3072:aPP3tGXRvjxCb5NgXDY7uSlkJcUa7kYQTcqW2NdQQGH/UDhSCUc4aqTBPL:WIlKgzelZNQSBQGH/CSpWqTx

    Score
    6/10
    ransomware

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Sets desktop wallpaper using registry

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Defacement

1
T1491

Resource Development

Reconnaissance

Tasks