Overview

overview

10

Static

static

3

20520a36e7...18.dll

windows7-x64

10

20520a36e7...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    20520a36e7273a3b6128369fa72c1aa7_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240507-mkswlaeh67

  • MD5

    20520a36e7273a3b6128369fa72c1aa7

  • SHA1

    02276c660f3622a32ed8c5ba9cd42a42269e2a17

  • SHA256

    05db4f6d2715f067d3b212bbbd91aafc4a6d66316ddd6e7e4a523f31841b4bc3

  • SHA512

    bcb2aa934e58f3f48c59dcf3c24ea41de1e83510382d790cd5b152161b037ee27c59bb546cbc82e0933782d8d0761a808ff9ce00fa9883907e7d7f677a6111f4

  • SSDEEP

    98304:TDqPoBhzPyqRxcSUDk36SAEdhvxWa9P593RzPfwo:TDqPeaSxcxk3ZAEUadzRLfw

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      20520a36e7273a3b6128369fa72c1aa7_JaffaCakes118

    • Size

      5.0MB

    • MD5

      20520a36e7273a3b6128369fa72c1aa7

    • SHA1

      02276c660f3622a32ed8c5ba9cd42a42269e2a17

    • SHA256

      05db4f6d2715f067d3b212bbbd91aafc4a6d66316ddd6e7e4a523f31841b4bc3

    • SHA512

      bcb2aa934e58f3f48c59dcf3c24ea41de1e83510382d790cd5b152161b037ee27c59bb546cbc82e0933782d8d0761a808ff9ce00fa9883907e7d7f677a6111f4

    • SSDEEP

      98304:TDqPoBhzPyqRxcSUDk36SAEdhvxWa9P593RzPfwo:TDqPeaSxcxk3ZAEUadzRLfw

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3232) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks