General
-
Target
b1890a5b75b42402d2f1c340460e62d7_JaffaCakes118
-
Size
317KB
-
Sample
240616-d1pdnsxfrh
-
MD5
b1890a5b75b42402d2f1c340460e62d7
-
SHA1
bc6a1a2b547117c2cd4cba545eb456c102952a31
-
SHA256
6cff63d3a2d066c2f487098310a5f1149e343e90e26f55887ee26b2a73b3ad22
-
SHA512
b94fee716b9559cdaa44047f1e13d3c330aed4c60099e00e93e2ac4c0f201d7f8093f03b4a5d71c5041a406455717ece825892dbbbf2a79f855c1cfa29d90c0c
-
SSDEEP
6144:Usyq4yjEuqdfBeobMkHCn3GbRSSMHkRfA93S8CtCeDzU2EuHM7UQA:UsP4yjLqduVn2bRSJk693HCtC8UnuH+y
Static task
static1
Behavioral task
behavioral1
Sample
b1890a5b75b42402d2f1c340460e62d7_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b1890a5b75b42402d2f1c340460e62d7_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
b1890a5b75b42402d2f1c340460e62d7_JaffaCakes118
-
Size
317KB
-
MD5
b1890a5b75b42402d2f1c340460e62d7
-
SHA1
bc6a1a2b547117c2cd4cba545eb456c102952a31
-
SHA256
6cff63d3a2d066c2f487098310a5f1149e343e90e26f55887ee26b2a73b3ad22
-
SHA512
b94fee716b9559cdaa44047f1e13d3c330aed4c60099e00e93e2ac4c0f201d7f8093f03b4a5d71c5041a406455717ece825892dbbbf2a79f855c1cfa29d90c0c
-
SSDEEP
6144:Usyq4yjEuqdfBeobMkHCn3GbRSSMHkRfA93S8CtCeDzU2EuHM7UQA:UsP4yjLqduVn2bRSJk693HCtC8UnuH+y
Score10/10-
Locky (Osiris variant)
Variant of the Locky ransomware seen in the wild since early 2017.
-
Deletes itself
-
Sets desktop wallpaper using registry
-