Overview

overview

10

Static

static

3

23c52d8490...18.exe

windows7-x64

10

23c52d8490...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    23c52d84903b697485b4707da6ab1fdc_JaffaCakes118

  • Size

    3.6MB

  • Sample

    240508-h3aeragf7v

  • MD5

    23c52d84903b697485b4707da6ab1fdc

  • SHA1

    a4eddb305804524293a2eb2e5900348a0549237f

  • SHA256

    da7614ab163f534139da24d2cb5e0b1681e9db0998a0c2d38298598d6441ec23

  • SHA512

    26924aa3c0852e8d71d8ec75bce5271f627b15f828745d81c98e6c8b74c5fec9b219870e3e48fad2f50377b69f9848d6f22280b1b2e3a6bf846efb3923bb0fc1

  • SSDEEP

    49152:2nAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAAu0:yDqPoBhz1aRxcSUDk36SA+

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      23c52d84903b697485b4707da6ab1fdc_JaffaCakes118

    • Size

      3.6MB

    • MD5

      23c52d84903b697485b4707da6ab1fdc

    • SHA1

      a4eddb305804524293a2eb2e5900348a0549237f

    • SHA256

      da7614ab163f534139da24d2cb5e0b1681e9db0998a0c2d38298598d6441ec23

    • SHA512

      26924aa3c0852e8d71d8ec75bce5271f627b15f828745d81c98e6c8b74c5fec9b219870e3e48fad2f50377b69f9848d6f22280b1b2e3a6bf846efb3923bb0fc1

    • SSDEEP

      49152:2nAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAAu0:yDqPoBhz1aRxcSUDk36SA+

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3208) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks