Overview

overview

10

Static

static

3

02a8195f91...18.dll

windows7-x64

10

02a8195f91...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    02a8195f910cc2dfe3331ccf63db5468_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240427-hjgpqadh5y

  • MD5

    02a8195f910cc2dfe3331ccf63db5468

  • SHA1

    fb458441192c77a3c0b00d3240ba8c3ae04f2bd3

  • SHA256

    137f11d29d5e48d945858906be536f238b153b63d2b523604606a328de4aad7d

  • SHA512

    8fc1d6830cfefc2e33d7856def82f97a050f2289fb7079f8aa086089963739a3390d5b55bcf0e2c59c056078aa09dc901244e1fc35493e88f6bafce28180cfe4

  • SSDEEP

    24576:SbLgddQhfdmMSirYbcMNgef0QeQjG/D8kIqRYoAdN:SnAQqMSPbcBVQej/1IN

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      02a8195f910cc2dfe3331ccf63db5468_JaffaCakes118

    • Size

      5.0MB

    • MD5

      02a8195f910cc2dfe3331ccf63db5468

    • SHA1

      fb458441192c77a3c0b00d3240ba8c3ae04f2bd3

    • SHA256

      137f11d29d5e48d945858906be536f238b153b63d2b523604606a328de4aad7d

    • SHA512

      8fc1d6830cfefc2e33d7856def82f97a050f2289fb7079f8aa086089963739a3390d5b55bcf0e2c59c056078aa09dc901244e1fc35493e88f6bafce28180cfe4

    • SSDEEP

      24576:SbLgddQhfdmMSirYbcMNgef0QeQjG/D8kIqRYoAdN:SnAQqMSPbcBVQej/1IN

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3294) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks