Overview

overview

10

Static

static

3

1f07ba6cd1...18.dll

windows7-x64

10

1f07ba6cd1...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1f07ba6cd1e615b4db669c37e636a5e7_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240507-b75ywsfh87

  • MD5

    1f07ba6cd1e615b4db669c37e636a5e7

  • SHA1

    85476ac2880923def8337cf59d7c1fa7fe13f0b1

  • SHA256

    b9012d5f9586f7d4c78daebc34a541fe05d6777fecb389fe1b16874183c3e99f

  • SHA512

    0e5d2ad8518af0321a905eae0ca1d075e87b99c2ac1c226b9791b57be82c38f7aead038218b17a7ac92d89fe7f8a5eb16679674745b41ca6868ae273152e64bc

  • SSDEEP

    49152:SnAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6S:+DqPoBhz1aRxcSUDk36S

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      1f07ba6cd1e615b4db669c37e636a5e7_JaffaCakes118

    • Size

      5.0MB

    • MD5

      1f07ba6cd1e615b4db669c37e636a5e7

    • SHA1

      85476ac2880923def8337cf59d7c1fa7fe13f0b1

    • SHA256

      b9012d5f9586f7d4c78daebc34a541fe05d6777fecb389fe1b16874183c3e99f

    • SHA512

      0e5d2ad8518af0321a905eae0ca1d075e87b99c2ac1c226b9791b57be82c38f7aead038218b17a7ac92d89fe7f8a5eb16679674745b41ca6868ae273152e64bc

    • SSDEEP

      49152:SnAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6S:+DqPoBhz1aRxcSUDk36S

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3233) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks