Overview

overview

9

Static

static

7

c208969086...18.exe

windows7-x64

9

c208969086...18.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    c20896908659d6255968d88d4799da75_JaffaCakes118.exe

  • Size

    96KB

  • Sample

    240504-yn71gahd3y

  • MD5

    c20896908659d6255968d88d4799da75

  • SHA1

    ab2354fbdf8dfb5a06ecb6b9004c9a303fe05b08

  • SHA256

    f54fe55b68a103ca56bca249ae310d6431e4943522e1d9aea01ee82502f29252

  • SHA512

    00a8217660b9148d1d6ccc63548500d0ba51c8952c8f9e762a6b60a0122d21d25c2f3e29eca44eb5eb751c45ebb09013de04390db10675fd49d2e15174065a38

  • SSDEEP

    1536:Isz1++PJHJXFAIuZAIuekc9zBfA1OjBWgOI3uicwa+shcBEN2iqxtdSCow8hfk:hfAIuZAIuYSMjoqtMHfhfk

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      c20896908659d6255968d88d4799da75_JaffaCakes118.exe

    • Size

      96KB

    • MD5

      c20896908659d6255968d88d4799da75

    • SHA1

      ab2354fbdf8dfb5a06ecb6b9004c9a303fe05b08

    • SHA256

      f54fe55b68a103ca56bca249ae310d6431e4943522e1d9aea01ee82502f29252

    • SHA512

      00a8217660b9148d1d6ccc63548500d0ba51c8952c8f9e762a6b60a0122d21d25c2f3e29eca44eb5eb751c45ebb09013de04390db10675fd49d2e15174065a38

    • SSDEEP

      1536:Isz1++PJHJXFAIuZAIuekc9zBfA1OjBWgOI3uicwa+shcBEN2iqxtdSCow8hfk:hfAIuZAIuYSMjoqtMHfhfk

    Score
    9/10
    ransomwareupx

    • Renames multiple (3440) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks