Overview

overview

10

Static

static

3

0d65e35e3f...18.dll

windows7-x64

10

0d65e35e3f...18.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0d65e35e3f4c02a1f114caa06febcfb9_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240502-eazbmaaa86

  • MD5

    0d65e35e3f4c02a1f114caa06febcfb9

  • SHA1

    18117e82f22d3c97fc375c550182d2ac9ded8301

  • SHA256

    695e60fde52ae7bf5eb14e06a27675da78649a1e6fc79c9bf1e57fe006973d65

  • SHA512

    34f6f6cc672ee4f4a9fc2072cf6376834152778a60fc0409da0f468f77dedc1b1371156246f1afbba184845f43e486e88db9135faffcc50efd5115cee52ae80b

  • SSDEEP

    49152:SnAQqMSPbcBVQej4INRx+TSqTdbxJM0He:+DqPoBh0aRxcSU9xWae

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      0d65e35e3f4c02a1f114caa06febcfb9_JaffaCakes118

    • Size

      5.0MB

    • MD5

      0d65e35e3f4c02a1f114caa06febcfb9

    • SHA1

      18117e82f22d3c97fc375c550182d2ac9ded8301

    • SHA256

      695e60fde52ae7bf5eb14e06a27675da78649a1e6fc79c9bf1e57fe006973d65

    • SHA512

      34f6f6cc672ee4f4a9fc2072cf6376834152778a60fc0409da0f468f77dedc1b1371156246f1afbba184845f43e486e88db9135faffcc50efd5115cee52ae80b

    • SSDEEP

      49152:SnAQqMSPbcBVQej4INRx+TSqTdbxJM0He:+DqPoBh0aRxcSU9xWae

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3193) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks