General

  • Target

    779df3e9d22b688c2483a16130d3887c_JaffaCakes118

  • Size

    615KB

  • Sample

    240527-czmm1sdb4w

  • MD5

    779df3e9d22b688c2483a16130d3887c

  • SHA1

    dd83fb41fc7ac424dc27c96f602bbcb352f63d48

  • SHA256

    7901ebd5dd0b9ab60dab39754ae62dcca413b4d3a6a2120af442bab86b3395f8

  • SHA512

    50522b51e0ad216f16745e131fedb861ba01e930dcc06097e9ccabca9fc72765ba980734cadfd2d6fb8015e93d5f875a531bdf12b2c1b87337cf1d54de1be1cb

  • SSDEEP

    12288:ABRpTQKGR7CeMawvztNwKkwuNd23Pn9bzX2vuZiZ7LiA7OK:AVTQz6aWs723Ptb2mZY7e81

Malware Config

Targets

    • Target

      779df3e9d22b688c2483a16130d3887c_JaffaCakes118

    • Size

      615KB

    • MD5

      779df3e9d22b688c2483a16130d3887c

    • SHA1

      dd83fb41fc7ac424dc27c96f602bbcb352f63d48

    • SHA256

      7901ebd5dd0b9ab60dab39754ae62dcca413b4d3a6a2120af442bab86b3395f8

    • SHA512

      50522b51e0ad216f16745e131fedb861ba01e930dcc06097e9ccabca9fc72765ba980734cadfd2d6fb8015e93d5f875a531bdf12b2c1b87337cf1d54de1be1cb

    • SSDEEP

      12288:ABRpTQKGR7CeMawvztNwKkwuNd23Pn9bzX2vuZiZ7LiA7OK:AVTQz6aWs723Ptb2mZY7e81

    • Locky (Lukitus variant)

      Variant of the Locky ransomware seen in the wild since late 2017.

    • Deletes itself

    • Sets desktop wallpaper using registry

MITRE ATT&CK Enterprise v15

Tasks