Overview

overview

10

Static

static

3

4aae8d3248...18.dll

windows7-x64

10

4aae8d3248...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4aae8d3248aae366d8668eefc8e4ecbb_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240516-msvp6agg2x

  • MD5

    4aae8d3248aae366d8668eefc8e4ecbb

  • SHA1

    4488bcf800d2e04e4ca388df134868e38c1a6fd6

  • SHA256

    355b6070cd2a0b31c9b42b62c14b8b6dc4ee857152a1e1b501b6cbda73e9a0b6

  • SHA512

    2256097b284f4a328a617131bb2a43b82064b735c3f2efb5c2b2f7b1f98728f9030c9d7e6e243e41722deee99dbe7b8cc942816ef69eee3d747a708be4010805

  • SSDEEP

    24576:SbLgddQhfdmMSirYbcMNgef0q1LJMfcH9PO6LLuYAMEcpcL7:SnAQqMSPbcBVqxJM0H9PAMEc

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      4aae8d3248aae366d8668eefc8e4ecbb_JaffaCakes118

    • Size

      5.0MB

    • MD5

      4aae8d3248aae366d8668eefc8e4ecbb

    • SHA1

      4488bcf800d2e04e4ca388df134868e38c1a6fd6

    • SHA256

      355b6070cd2a0b31c9b42b62c14b8b6dc4ee857152a1e1b501b6cbda73e9a0b6

    • SHA512

      2256097b284f4a328a617131bb2a43b82064b735c3f2efb5c2b2f7b1f98728f9030c9d7e6e243e41722deee99dbe7b8cc942816ef69eee3d747a708be4010805

    • SSDEEP

      24576:SbLgddQhfdmMSirYbcMNgef0q1LJMfcH9PO6LLuYAMEcpcL7:SnAQqMSPbcBVqxJM0H9PAMEc

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3223) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks