Overview

overview

10

Static

static

3

7f9c454a2e...18.exe

windows7-x64

10

7f9c454a2e...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7f9c454a2e016e533e181d53eba113bc_JaffaCakes118

  • Size

    827KB

  • Sample

    240529-f1dnaacf24

  • MD5

    7f9c454a2e016e533e181d53eba113bc

  • SHA1

    694dc7713537a7237030f7623881423fcb8d8c5c

  • SHA256

    c7dc529d8aae76b4e797e4e9e3ea7cd69669e6c3bb3f94d80f1974d1b9f69378

  • SHA512

    6869cf5a7c3526acf402b1ef09a9477dedf6cf534ff728e0823b9413ba41e888bd5b61cc20421d4a799df493126598a4a906ac2ab46147d9e4bcfa5d3600a110

  • SSDEEP

    12288:06NINoPgXqvRyq5E3R18y0kQzX3EL1TdB0JUsoSfsJuRqQy5d5t:06iWP9JAR18ycD3ErB2rs8MQy5

Score
10/10
cryptolockerpersistenceransomware

Malware Config

Targets

    • Target

      7f9c454a2e016e533e181d53eba113bc_JaffaCakes118

    • Size

      827KB

    • MD5

      7f9c454a2e016e533e181d53eba113bc

    • SHA1

      694dc7713537a7237030f7623881423fcb8d8c5c

    • SHA256

      c7dc529d8aae76b4e797e4e9e3ea7cd69669e6c3bb3f94d80f1974d1b9f69378

    • SHA512

      6869cf5a7c3526acf402b1ef09a9477dedf6cf534ff728e0823b9413ba41e888bd5b61cc20421d4a799df493126598a4a906ac2ab46147d9e4bcfa5d3600a110

    • SSDEEP

      12288:06NINoPgXqvRyq5E3R18y0kQzX3EL1TdB0JUsoSfsJuRqQy5d5t:06iWP9JAR18ycD3ErB2rs8MQy5

    Score
    10/10
    cryptolockerpersistenceransomware

    • CryptoLocker

      Ransomware family with multiple variants.

      ransomwarecryptolocker

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks