Overview

overview

9

Static

static

3

875885e80f...18.exe

windows7-x64

9

875885e80f...18.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    875885e80f7cd2d599e317f7a6353d55_JaffaCakes118.exe

  • Size

    270KB

  • Sample

    240504-yctzgagg2v

  • MD5

    875885e80f7cd2d599e317f7a6353d55

  • SHA1

    dfd8fefef2b4f9e960bf91b1122e1f65c138a3e1

  • SHA256

    8d2f6b054ca6a2f2822aa3786cdf524dc3a6f686102c07644009807072ec211f

  • SHA512

    f43577b0cff71decb63cab1e46f962ccdb2df332524e46e58849ce11866bcd3271a8239a7496559480fbdc034934bf9a9b426a33a91dcf10f873e9e665d2e715

  • SSDEEP

    6144:RqlIyFESWu0SWuGS4nNcbLnKjz47fiD+NZXoxSFQJm:tyKn+bLKjTDgZXoQ

Score
9/10
ransomware

Malware Config

Targets

    • Target

      875885e80f7cd2d599e317f7a6353d55_JaffaCakes118.exe

    • Size

      270KB

    • MD5

      875885e80f7cd2d599e317f7a6353d55

    • SHA1

      dfd8fefef2b4f9e960bf91b1122e1f65c138a3e1

    • SHA256

      8d2f6b054ca6a2f2822aa3786cdf524dc3a6f686102c07644009807072ec211f

    • SHA512

      f43577b0cff71decb63cab1e46f962ccdb2df332524e46e58849ce11866bcd3271a8239a7496559480fbdc034934bf9a9b426a33a91dcf10f873e9e665d2e715

    • SSDEEP

      6144:RqlIyFESWu0SWuGS4nNcbLnKjz47fiD+NZXoxSFQJm:tyKn+bLKjTDgZXoQ

    Score
    9/10
    ransomware

    • Renames multiple (2848) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks