Overview

overview

10

Static

static

3

24b09d6d48...18.exe

windows7-x64

10

24b09d6d48...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    24b09d6d48a068eba044d705969f0d42_JaffaCakes118

  • Size

    3.6MB

  • Sample

    240508-ntyc4sdc29

  • MD5

    24b09d6d48a068eba044d705969f0d42

  • SHA1

    2226743f938e7ff7ac9ba3bf47417f226ad201a0

  • SHA256

    87d8c2f8db44f24d05e704fe3876044d55e3bbfbaf6c195fb106ebd8351f6fb1

  • SHA512

    986f2e6749dcba32b20d0c5859ef908b8bd91bb70e54a0a2de33435d8ddca06f4d38ee61a178dba7b97efa65cd0bcc8a9c8ee23fe22eb6d027f6c2620dbec20b

  • SSDEEP

    24576:2bLgddQhfdmMSirYbcfvAVfNGPhb04DtbHy8ZMFRqx4y4xEbwO6:2nAQqMSPbceNGPhb04DtbHvZMFY6

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      24b09d6d48a068eba044d705969f0d42_JaffaCakes118

    • Size

      3.6MB

    • MD5

      24b09d6d48a068eba044d705969f0d42

    • SHA1

      2226743f938e7ff7ac9ba3bf47417f226ad201a0

    • SHA256

      87d8c2f8db44f24d05e704fe3876044d55e3bbfbaf6c195fb106ebd8351f6fb1

    • SHA512

      986f2e6749dcba32b20d0c5859ef908b8bd91bb70e54a0a2de33435d8ddca06f4d38ee61a178dba7b97efa65cd0bcc8a9c8ee23fe22eb6d027f6c2620dbec20b

    • SSDEEP

      24576:2bLgddQhfdmMSirYbcfvAVfNGPhb04DtbHy8ZMFRqx4y4xEbwO6:2nAQqMSPbceNGPhb04DtbHvZMFY6

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3281) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks