Overview

overview

10

Static

static

3

272c2091af...18.dll

windows7-x64

10

272c2091af...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    272c2091af2a86707aad37c311833152_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240508-29kzlsfc79

  • MD5

    272c2091af2a86707aad37c311833152

  • SHA1

    24dc6608fcda83c32386154231c5f317442bf054

  • SHA256

    61fb253b656b4ec88782baaf9e8e741e32789dce3ced825e65edafc0a060cc09

  • SHA512

    ab87f2093012314d4d17fcd70bec10ab1b7d1651917651dca6949aa0b40c97395f86a6353a126e4dd0e6f972dcd3411295c560ebb7414fb9772b5889dd014b95

  • SSDEEP

    12288:yebLgPlu+QhMbaIMu7L5NVEr7CgNt1F0vnwqYYcIOzidenqEAqb:zbLgddQhfdmMKkqYYLZW

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      272c2091af2a86707aad37c311833152_JaffaCakes118

    • Size

      5.0MB

    • MD5

      272c2091af2a86707aad37c311833152

    • SHA1

      24dc6608fcda83c32386154231c5f317442bf054

    • SHA256

      61fb253b656b4ec88782baaf9e8e741e32789dce3ced825e65edafc0a060cc09

    • SHA512

      ab87f2093012314d4d17fcd70bec10ab1b7d1651917651dca6949aa0b40c97395f86a6353a126e4dd0e6f972dcd3411295c560ebb7414fb9772b5889dd014b95

    • SSDEEP

      12288:yebLgPlu+QhMbaIMu7L5NVEr7CgNt1F0vnwqYYcIOzidenqEAqb:zbLgddQhfdmMKkqYYLZW

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3212) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks