Overview

overview

10

Static

static

3

301a975551...18.dll

windows7-x64

10

301a975551...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    301a97555113f7129e95d7567b4ca3eb_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240510-vejpqsfg2w

  • MD5

    301a97555113f7129e95d7567b4ca3eb

  • SHA1

    a41a4889589bfde1e30ce014b75f8320af1d5dec

  • SHA256

    78b9266c829855c84e60aa307f8db20efdfa805524f94a0670ba9415b69279c6

  • SHA512

    bc2e1dffe144391113986053742ad7e02cc9183e65f64b11a40321550a001c8b4e51e76736625f025a46b2772b84878710e0d5b6fdc9ce834994f69847fdc4f9

  • SSDEEP

    98304:TDqPoBhz1oDk36SAEdhvxWa9P593R8yAVp2H:TDqPe18k3ZAEUadzR8yc4H

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      301a97555113f7129e95d7567b4ca3eb_JaffaCakes118

    • Size

      5.0MB

    • MD5

      301a97555113f7129e95d7567b4ca3eb

    • SHA1

      a41a4889589bfde1e30ce014b75f8320af1d5dec

    • SHA256

      78b9266c829855c84e60aa307f8db20efdfa805524f94a0670ba9415b69279c6

    • SHA512

      bc2e1dffe144391113986053742ad7e02cc9183e65f64b11a40321550a001c8b4e51e76736625f025a46b2772b84878710e0d5b6fdc9ce834994f69847fdc4f9

    • SSDEEP

      98304:TDqPoBhz1oDk36SAEdhvxWa9P593R8yAVp2H:TDqPe18k3ZAEUadzR8yc4H

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3248) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks