Overview

overview

10

Static

static

3

22260f5ef3...18.dll

windows7-x64

10

22260f5ef3...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    22260f5ef396cb1c118a386d606815e4_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240507-275w1add9s

  • MD5

    22260f5ef396cb1c118a386d606815e4

  • SHA1

    46595f20076b4ae1c8065139a4f20bf58020b678

  • SHA256

    455d35c432b4b1f19edc2e081b765d44c24057100321b9f07ca2c81ad1ddf68e

  • SHA512

    640099aef6bb1043ca09ee383c0b30ee1344443824145626f4b8a8c4c1949477e7ef0779f40ea6357a2b55ff077be0ce518e0447e924f47fd8062d125b8577b7

  • SSDEEP

    24576:SbLgddQhfdmMSirYbcMNgef0fbOSSqTPVXmiHkQg6eX6SASkdd1AygfLO0:SnAQqMSPbcBVDSqTdX1HkQo6SALHAD

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      22260f5ef396cb1c118a386d606815e4_JaffaCakes118

    • Size

      5.0MB

    • MD5

      22260f5ef396cb1c118a386d606815e4

    • SHA1

      46595f20076b4ae1c8065139a4f20bf58020b678

    • SHA256

      455d35c432b4b1f19edc2e081b765d44c24057100321b9f07ca2c81ad1ddf68e

    • SHA512

      640099aef6bb1043ca09ee383c0b30ee1344443824145626f4b8a8c4c1949477e7ef0779f40ea6357a2b55ff077be0ce518e0447e924f47fd8062d125b8577b7

    • SSDEEP

      24576:SbLgddQhfdmMSirYbcMNgef0fbOSSqTPVXmiHkQg6eX6SASkdd1AygfLO0:SnAQqMSPbcBVDSqTdX1HkQo6SALHAD

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3312) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks