Overview

overview

10

Static

static

3

15142231b8...18.exe

windows7-x64

10

15142231b8...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    15142231b8ba60f6fc54fda073dc2a04_JaffaCakes118

  • Size

    3.6MB

  • Sample

    240505-ab93asfh9t

  • MD5

    15142231b8ba60f6fc54fda073dc2a04

  • SHA1

    5ce468544002791ef66475e9107cef79db4f483a

  • SHA256

    989c507f699f7b059b3ee5276218e1e417446ddabd0d910f14579f3925526325

  • SHA512

    d4960211b98bca2a64934ba919089db4cc12f29e25db17fc9ac4351108e77e543d25c6a3fa3a651283d65302a816d72498a9d1710795010289dfa1ff0f493154

  • SSDEEP

    49152:VnjQqMSPbcBVQej/1INgwuqzgX8knK4JKARyPHRieTGJzNOEDaExEon:Z8qPoBhz1a8

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      15142231b8ba60f6fc54fda073dc2a04_JaffaCakes118

    • Size

      3.6MB

    • MD5

      15142231b8ba60f6fc54fda073dc2a04

    • SHA1

      5ce468544002791ef66475e9107cef79db4f483a

    • SHA256

      989c507f699f7b059b3ee5276218e1e417446ddabd0d910f14579f3925526325

    • SHA512

      d4960211b98bca2a64934ba919089db4cc12f29e25db17fc9ac4351108e77e543d25c6a3fa3a651283d65302a816d72498a9d1710795010289dfa1ff0f493154

    • SSDEEP

      49152:VnjQqMSPbcBVQej/1INgwuqzgX8knK4JKARyPHRieTGJzNOEDaExEon:Z8qPoBhz1a8

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3341) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks