Overview

overview

10

Static

static

3

2adf3df26c...18.dll

windows7-x64

10

2adf3df26c...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2adf3df26c4c3f88f288958bfaf9710d_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240509-t2tb1sef52

  • MD5

    2adf3df26c4c3f88f288958bfaf9710d

  • SHA1

    87ac0d58aec16889ba26ecd143f7cc25dde5b8b4

  • SHA256

    e4de2bcdd89334ece46ef04becd538e177de2591abea682a7e7cb8edb967b026

  • SHA512

    bf1c385fa0ca4602ea53ed8b17fb976b23001567ad818a3dc83dbaa7ac3652029e5f541fcc91784e87e7fa02cf73b66b8e5ae99010e057f8eface8514bf0724a

  • SSDEEP

    98304:TDqPoBhz1aRxcSUDk36SAEdhvxWa9P593R:TDqPe1Cxcxk3ZAEUadzR

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2adf3df26c4c3f88f288958bfaf9710d_JaffaCakes118

    • Size

      5.0MB

    • MD5

      2adf3df26c4c3f88f288958bfaf9710d

    • SHA1

      87ac0d58aec16889ba26ecd143f7cc25dde5b8b4

    • SHA256

      e4de2bcdd89334ece46ef04becd538e177de2591abea682a7e7cb8edb967b026

    • SHA512

      bf1c385fa0ca4602ea53ed8b17fb976b23001567ad818a3dc83dbaa7ac3652029e5f541fcc91784e87e7fa02cf73b66b8e5ae99010e057f8eface8514bf0724a

    • SSDEEP

      98304:TDqPoBhz1aRxcSUDk36SAEdhvxWa9P593R:TDqPe1Cxcxk3ZAEUadzR

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3288) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks