Overview

overview

10

Static

static

3

3e3f26dedf...18.dll

windows7-x64

10

3e3f26dedf...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3e3f26dedf4198bae015c585b1c02d2e_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240513-hp9yfsbc7v

  • MD5

    3e3f26dedf4198bae015c585b1c02d2e

  • SHA1

    9f18ffe559436ad5436a576ceb29a6f7bc078312

  • SHA256

    610196bdddf7c8e3c2a05e2c9894b84c1c20cbb2126bc9b7c930e05a6ac839f8

  • SHA512

    01b5310e264e0c54f857929879c043c238e875c909858ee937c233f0ec239cbb43f790573126b8caf51788faf5d99521c84428c4809f849b0f18d5dc7fc94761

  • SSDEEP

    98304:d8qPoBhMcSUDk36SAEdhvxWa9P593R8yAVp2H:d8qPFcxk3ZAEUadzR8yc4H

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      3e3f26dedf4198bae015c585b1c02d2e_JaffaCakes118

    • Size

      5.0MB

    • MD5

      3e3f26dedf4198bae015c585b1c02d2e

    • SHA1

      9f18ffe559436ad5436a576ceb29a6f7bc078312

    • SHA256

      610196bdddf7c8e3c2a05e2c9894b84c1c20cbb2126bc9b7c930e05a6ac839f8

    • SHA512

      01b5310e264e0c54f857929879c043c238e875c909858ee937c233f0ec239cbb43f790573126b8caf51788faf5d99521c84428c4809f849b0f18d5dc7fc94761

    • SSDEEP

      98304:d8qPoBhMcSUDk36SAEdhvxWa9P593R8yAVp2H:d8qPFcxk3ZAEUadzR8yc4H

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3181) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks