Overview

overview

10

Static

static

3

2850cdf96f...18.dll

windows7-x64

10

2850cdf96f...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2850cdf96ff0e9273410b7119c7c588b_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240509-e61jkaah6v

  • MD5

    2850cdf96ff0e9273410b7119c7c588b

  • SHA1

    0af325e42681d9a43370c9403df5e54d8fbf31a8

  • SHA256

    d4d59a00f142b22da605361d8a3ae904d21586c7ce4e2e1cb4d476c9936752c8

  • SHA512

    17a7748048168909cc7e2f5c36629e8e8b80ad23823e7ad300ec5a3c19218a47ca56db873e0896dfc5be12ed2285c265c59dcb87c0b09371f4ae7ba558b45209

  • SSDEEP

    98304:+DqPoBhz1aRxcSUDk36SAEdhvxWa9P5C:+DqPe1Cxcxk3ZAEUad

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2850cdf96ff0e9273410b7119c7c588b_JaffaCakes118

    • Size

      5.0MB

    • MD5

      2850cdf96ff0e9273410b7119c7c588b

    • SHA1

      0af325e42681d9a43370c9403df5e54d8fbf31a8

    • SHA256

      d4d59a00f142b22da605361d8a3ae904d21586c7ce4e2e1cb4d476c9936752c8

    • SHA512

      17a7748048168909cc7e2f5c36629e8e8b80ad23823e7ad300ec5a3c19218a47ca56db873e0896dfc5be12ed2285c265c59dcb87c0b09371f4ae7ba558b45209

    • SSDEEP

      98304:+DqPoBhz1aRxcSUDk36SAEdhvxWa9P5C:+DqPe1Cxcxk3ZAEUad

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3022) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks