General
-
Target
2c163be10c2dcd9b96243bd8175889d4_JaffaCakes118
-
Size
659KB
-
Sample
240509-2pr77aba41
-
MD5
2c163be10c2dcd9b96243bd8175889d4
-
SHA1
d086fe8bbd8b7129d89dc1cfcb8a8175a6445b29
-
SHA256
a4bb7f498946155aaf1f6724dc6c37b7a149a369d4e5af724f3794c34629f371
-
SHA512
350f8c56929d87d0caa0993c5b6a6a2e6d9f7d753ad5e94a36538fbf2b5669c3dadba0866d22d1d5f8f4be6a4eae82672cd5ed378535c07c7e51c88e4e5b436f
-
SSDEEP
12288:DBBph23Ks1mQnWattmsbMVSH05SxQiEQ9jmE56:DBBK3p0RzYa+E
Static task
static1
Behavioral task
behavioral1
Sample
2c163be10c2dcd9b96243bd8175889d4_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2c163be10c2dcd9b96243bd8175889d4_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2c163be10c2dcd9b96243bd8175889d4_JaffaCakes118
-
Size
659KB
-
MD5
2c163be10c2dcd9b96243bd8175889d4
-
SHA1
d086fe8bbd8b7129d89dc1cfcb8a8175a6445b29
-
SHA256
a4bb7f498946155aaf1f6724dc6c37b7a149a369d4e5af724f3794c34629f371
-
SHA512
350f8c56929d87d0caa0993c5b6a6a2e6d9f7d753ad5e94a36538fbf2b5669c3dadba0866d22d1d5f8f4be6a4eae82672cd5ed378535c07c7e51c88e4e5b436f
-
SSDEEP
12288:DBBph23Ks1mQnWattmsbMVSH05SxQiEQ9jmE56:DBBK3p0RzYa+E
Score10/10-
Locky (Lukitus variant)
Variant of the Locky ransomware seen in the wild since late 2017.
-
Deletes itself
-
Sets desktop wallpaper using registry
-