General
-
Target
8f1c524cd3dd25e3d7b0e958db51048f_JaffaCakes118
-
Size
615KB
-
Sample
240602-xt1b5scg79
-
MD5
8f1c524cd3dd25e3d7b0e958db51048f
-
SHA1
7c37371d755738b20f8f5ab9ca236d04c9a0d60b
-
SHA256
fa5a353c16cbb3bc976b2a37abc69f2a0367e30093e68bb8986db106d2fcdb9a
-
SHA512
52a5b63e97ea67b15a43a94a916040fd727bb840cc26f1615cd81ab656a5e99258fde5f46b657d9d2b1ff072a266fe501ec450914a1027a2f6c98044ce9783fc
-
SSDEEP
12288:YBRpTibB8xNbXVhMnlodESdkVU6e23mBH9XPfHL2ad7s51:YVTFx9lhWlM2zfmBH9XnPW
Static task
static1
Behavioral task
behavioral1
Sample
8f1c524cd3dd25e3d7b0e958db51048f_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
8f1c524cd3dd25e3d7b0e958db51048f_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
8f1c524cd3dd25e3d7b0e958db51048f_JaffaCakes118
-
Size
615KB
-
MD5
8f1c524cd3dd25e3d7b0e958db51048f
-
SHA1
7c37371d755738b20f8f5ab9ca236d04c9a0d60b
-
SHA256
fa5a353c16cbb3bc976b2a37abc69f2a0367e30093e68bb8986db106d2fcdb9a
-
SHA512
52a5b63e97ea67b15a43a94a916040fd727bb840cc26f1615cd81ab656a5e99258fde5f46b657d9d2b1ff072a266fe501ec450914a1027a2f6c98044ce9783fc
-
SSDEEP
12288:YBRpTibB8xNbXVhMnlodESdkVU6e23mBH9XPfHL2ad7s51:YVTFx9lhWlM2zfmBH9XnPW
Score10/10-
Locky (Lukitus variant)
Variant of the Locky ransomware seen in the wild since late 2017.
-
Deletes itself
-
Sets desktop wallpaper using registry
-