Overview

overview

10

Static

static

3

711486a19e...18.exe

windows7-x64

10

711486a19e...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    711486a19e8b011528dee34a5d25776e_JaffaCakes118

  • Size

    140KB

  • Sample

    241023-2a24vavamm

  • MD5

    711486a19e8b011528dee34a5d25776e

  • SHA1

    7e131940fce4d157d0a338b8285e8e2298e8677d

  • SHA256

    880823dd9df0ca6047cd829a1031e8a167ccec0629fdeac40a097dd555debf7c

  • SHA512

    9213dc1b1ab70e6672e6bef43a50125e7752de303ddbdbfc5b395f3b228363dd57c036befb21c83945207954575b90021af0d4e1f6872253c20475f3dbc4e894

  • SSDEEP

    1536:rcQx/fZwezQjUho9JdZ582xHcocSVwVcl:IA/RwecEo9JdZ5rxvdVqY

Score
10/10
evasionpersistenceransomware

Malware Config

Targets

    • Target

      711486a19e8b011528dee34a5d25776e_JaffaCakes118

    • Size

      140KB

    • MD5

      711486a19e8b011528dee34a5d25776e

    • SHA1

      7e131940fce4d157d0a338b8285e8e2298e8677d

    • SHA256

      880823dd9df0ca6047cd829a1031e8a167ccec0629fdeac40a097dd555debf7c

    • SHA512

      9213dc1b1ab70e6672e6bef43a50125e7752de303ddbdbfc5b395f3b228363dd57c036befb21c83945207954575b90021af0d4e1f6872253c20475f3dbc4e894

    • SSDEEP

      1536:rcQx/fZwezQjUho9JdZ582xHcocSVwVcl:IA/RwecEo9JdZ5rxvdVqY

    Score
    10/10
    evasionpersistenceransomware

    • Modifies WinLogon for persistence

      persistence

    • Disables Task Manager via registry modification

      evasion

    • Drops desktop.ini file(s)

    • Sets desktop wallpaper using registry

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks