Overview

overview

10

Static

static

3

363d9a90f2...18.dll

windows7-x64

10

363d9a90f2...18.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    363d9a90f25c0e433ae694a043a04f3f_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240511-yhcx5sec8w

  • MD5

    363d9a90f25c0e433ae694a043a04f3f

  • SHA1

    7d466d2cf69edd7a716e16819f28443fd26ec2ff

  • SHA256

    4bb313325698fce9584a2c25c2747d8b2e2874c0688236e40f2c4822223a4ed2

  • SHA512

    7608bf473f785fca543c0f72e470e1dae0c1ffb9ab1a76d5e9623b88bd2b3611a845e16935f4188bba9c03c963a9b05e074d1520dc8afe955b2a1bb12e35fe35

  • SSDEEP

    98304:TDqPoBhz1aRxcSUDk36SAEdhvxWa9P5U:TDqPe1Cxcxk3ZAEUadK

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      363d9a90f25c0e433ae694a043a04f3f_JaffaCakes118

    • Size

      5.0MB

    • MD5

      363d9a90f25c0e433ae694a043a04f3f

    • SHA1

      7d466d2cf69edd7a716e16819f28443fd26ec2ff

    • SHA256

      4bb313325698fce9584a2c25c2747d8b2e2874c0688236e40f2c4822223a4ed2

    • SHA512

      7608bf473f785fca543c0f72e470e1dae0c1ffb9ab1a76d5e9623b88bd2b3611a845e16935f4188bba9c03c963a9b05e074d1520dc8afe955b2a1bb12e35fe35

    • SSDEEP

      98304:TDqPoBhz1aRxcSUDk36SAEdhvxWa9P5U:TDqPe1Cxcxk3ZAEUadK

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3316) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks