Overview

overview

10

Static

static

3

27b1909032...18.dll

windows7-x64

10

27b1909032...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    27b1909032fd61c8538946b80e1196d7_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240509-b4qpssbe2v

  • MD5

    27b1909032fd61c8538946b80e1196d7

  • SHA1

    068db3c25da3037222a410cdbfa4582daaff7187

  • SHA256

    462083a9b81e8eec6f13754f3d0029cd219a595b320240d2eb8f30d9e5337ed1

  • SHA512

    f22324929c57c480d1d854962f49e74fb03ab8d676fb3b4e2ea674cdaa4f97580251ba6d7eace1c814fdf4e9665ef45fe5c8d24c8c6ff937c67decd54e90a700

  • SSDEEP

    49152:SnAQqMSPbcBVlvxJM0H9PAMEcaEau3R8yAH1plAH:+DqPoBDxWa9P593R8yAVp2H

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      27b1909032fd61c8538946b80e1196d7_JaffaCakes118

    • Size

      5.0MB

    • MD5

      27b1909032fd61c8538946b80e1196d7

    • SHA1

      068db3c25da3037222a410cdbfa4582daaff7187

    • SHA256

      462083a9b81e8eec6f13754f3d0029cd219a595b320240d2eb8f30d9e5337ed1

    • SHA512

      f22324929c57c480d1d854962f49e74fb03ab8d676fb3b4e2ea674cdaa4f97580251ba6d7eace1c814fdf4e9665ef45fe5c8d24c8c6ff937c67decd54e90a700

    • SSDEEP

      49152:SnAQqMSPbcBVlvxJM0H9PAMEcaEau3R8yAH1plAH:+DqPoBDxWa9P593R8yAVp2H

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3122) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks