Overview

overview

9

Static

static

7

8472b271cb...18.exe

windows7-x64

9

8472b271cb...18.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8472b271cb10bb7cf7514049b898d9c3_JaffaCakes118.exe

  • Size

    85KB

  • Sample

    240504-ychansgf9x

  • MD5

    8472b271cb10bb7cf7514049b898d9c3

  • SHA1

    cfee246a5dea2bc34f61b54e04ccf835a075f0d8

  • SHA256

    8a365fa959369919af757b979ce20fa868b939d7d784101c4432b524f07a0363

  • SHA512

    9ce9988f854995091be78bfa71773e9874e5d14137a2823135ecc3e3301238ebe93054c05e10c9c624127bf6b1fb7500b4d19f20ea8e1025086787fe19f64ada

  • SSDEEP

    1536:67Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q4xFrphgi1k:+nyiQSo+hgf

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      8472b271cb10bb7cf7514049b898d9c3_JaffaCakes118.exe

    • Size

      85KB

    • MD5

      8472b271cb10bb7cf7514049b898d9c3

    • SHA1

      cfee246a5dea2bc34f61b54e04ccf835a075f0d8

    • SHA256

      8a365fa959369919af757b979ce20fa868b939d7d784101c4432b524f07a0363

    • SHA512

      9ce9988f854995091be78bfa71773e9874e5d14137a2823135ecc3e3301238ebe93054c05e10c9c624127bf6b1fb7500b4d19f20ea8e1025086787fe19f64ada

    • SSDEEP

      1536:67Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q4xFrphgi1k:+nyiQSo+hgf

    Score
    9/10
    ransomwareupx

    • Renames multiple (3505) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks