Overview

overview

10

Static

static

3

0f31bd63c8...18.dll

windows7-x64

10

0f31bd63c8...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0f31bd63c85f42b46f8b5c07f02147b0_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240502-3zp19ahg8w

  • MD5

    0f31bd63c85f42b46f8b5c07f02147b0

  • SHA1

    7e7d97b8aa93efeddce129b890ec1ca14eb88c02

  • SHA256

    b7c7599d6304eaeb6a334de838938a36e4e306c0fd2562c64c9f9548a5c57c7c

  • SHA512

    ea7abcf150c572a3e0a0e45b731556e9875c68e8ea9fadd3ae49fcde221a45503516c6ae414ac5fb4a4e8c69ef4b6cee74be698d29f3821c264442dcaf3bfe76

  • SSDEEP

    24576:SbLgddQhfdmMSirYbcMNgef09G/D8kIqRYoAdNLKz6626M+vbOSSqTPVXmiHkQgz:SnAQqMSPbcBVU/1INRx+TSqTdX1HkQ

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      0f31bd63c85f42b46f8b5c07f02147b0_JaffaCakes118

    • Size

      5.0MB

    • MD5

      0f31bd63c85f42b46f8b5c07f02147b0

    • SHA1

      7e7d97b8aa93efeddce129b890ec1ca14eb88c02

    • SHA256

      b7c7599d6304eaeb6a334de838938a36e4e306c0fd2562c64c9f9548a5c57c7c

    • SHA512

      ea7abcf150c572a3e0a0e45b731556e9875c68e8ea9fadd3ae49fcde221a45503516c6ae414ac5fb4a4e8c69ef4b6cee74be698d29f3821c264442dcaf3bfe76

    • SSDEEP

      24576:SbLgddQhfdmMSirYbcMNgef09G/D8kIqRYoAdNLKz6626M+vbOSSqTPVXmiHkQgz:SnAQqMSPbcBVU/1INRx+TSqTdX1HkQ

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3275) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks