Overview

overview

10

Static

static

3

2ec7d1f90d...18.dll

windows7-x64

10

2ec7d1f90d...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2ec7d1f90d57b3f3e5057e3b032bea5a_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240510-m4gyfaae8v

  • MD5

    2ec7d1f90d57b3f3e5057e3b032bea5a

  • SHA1

    63536a6303c855181bf6a57fbf68d6e3b2e55145

  • SHA256

    427453cd2e3bada668d880e6eec35e83a92532263df7e69d2f67f30e627edf93

  • SHA512

    d0beb1dc06e9fcdcba033c5a7fc39d5453ffafadf6667f6a5fafbfb0a057c4b2e31ac112ccb22a0b80b92c792c0164e5e7e6460652641fcce54978d36a763857

  • SSDEEP

    49152:SnAQqMSPbcBVQej/1IN5AMEcQEau3R8yAH1plAH:+DqPoBhz1a55T3R8yAVp2H

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2ec7d1f90d57b3f3e5057e3b032bea5a_JaffaCakes118

    • Size

      5.0MB

    • MD5

      2ec7d1f90d57b3f3e5057e3b032bea5a

    • SHA1

      63536a6303c855181bf6a57fbf68d6e3b2e55145

    • SHA256

      427453cd2e3bada668d880e6eec35e83a92532263df7e69d2f67f30e627edf93

    • SHA512

      d0beb1dc06e9fcdcba033c5a7fc39d5453ffafadf6667f6a5fafbfb0a057c4b2e31ac112ccb22a0b80b92c792c0164e5e7e6460652641fcce54978d36a763857

    • SSDEEP

      49152:SnAQqMSPbcBVQej/1IN5AMEcQEau3R8yAH1plAH:+DqPoBhz1a55T3R8yAVp2H

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3170) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks