Overview

overview

10

Static

static

3

15383b74b2...18.dll

windows7-x64

10

15383b74b2...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    15383b74b2a3c0b39526bb03c6a264ca_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240505-a37fgscb83

  • MD5

    15383b74b2a3c0b39526bb03c6a264ca

  • SHA1

    96cdbfa321137f0f3c2700faf4e0d3987b3eb2f4

  • SHA256

    aba57fccc8744a927718aa029ddffd928775761a9baa8acf7df9752d52fd1000

  • SHA512

    62ca5a18f4aa8f587195e85af3ef5553c88313f7c1d07293f2440b6080576ff4d87636c569e556ee11af960070d26bcaa3e36a25de60b8e44cb373e7061cb25e

  • SSDEEP

    98304:TDqPoBexcSUDk36SAEdhvxWa9P593R8yAVp2H:TDqP1xcxk3ZAEUadzR8yc4H

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      15383b74b2a3c0b39526bb03c6a264ca_JaffaCakes118

    • Size

      5.0MB

    • MD5

      15383b74b2a3c0b39526bb03c6a264ca

    • SHA1

      96cdbfa321137f0f3c2700faf4e0d3987b3eb2f4

    • SHA256

      aba57fccc8744a927718aa029ddffd928775761a9baa8acf7df9752d52fd1000

    • SHA512

      62ca5a18f4aa8f587195e85af3ef5553c88313f7c1d07293f2440b6080576ff4d87636c569e556ee11af960070d26bcaa3e36a25de60b8e44cb373e7061cb25e

    • SSDEEP

      98304:TDqPoBexcSUDk36SAEdhvxWa9P593R8yAVp2H:TDqP1xcxk3ZAEUadzR8yc4H

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3207) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks