Resubmissions

General

  • Target

    4d32605bc1a5c408f1a34b99fc38a893_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240517-a94m6saa96

  • MD5

    4d32605bc1a5c408f1a34b99fc38a893

  • SHA1

    b77132e8981ce9c59cd5271ed230e8ab44ce43cd

  • SHA256

    c93d64322829ede29e935e4b620b8c3777f4ea6ac8e72c127c2126b83e66ba2a

  • SHA512

    8949c614a1ed3c9f87446e9bd2e073d06caa2b2190718160e13328ff9078a963005bb27ee12b35319584e404648a91de40aa7c260916d0d8ce69a9943a5004cf

  • SSDEEP

    98304:+DqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2:+DqPe1Cxcxk3ZAEUadzR8yc4

Malware Config

Targets

    • Target

      4d32605bc1a5c408f1a34b99fc38a893_JaffaCakes118

    • Size

      5.0MB

    • MD5

      4d32605bc1a5c408f1a34b99fc38a893

    • SHA1

      b77132e8981ce9c59cd5271ed230e8ab44ce43cd

    • SHA256

      c93d64322829ede29e935e4b620b8c3777f4ea6ac8e72c127c2126b83e66ba2a

    • SHA512

      8949c614a1ed3c9f87446e9bd2e073d06caa2b2190718160e13328ff9078a963005bb27ee12b35319584e404648a91de40aa7c260916d0d8ce69a9943a5004cf

    • SSDEEP

      98304:+DqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2:+DqPe1Cxcxk3ZAEUadzR8yc4

    • Wannacry

      WannaCry is a ransomware cryptoworm.

    • Contacts a large (1670) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Executes dropped EXE

MITRE ATT&CK Matrix ATT&CK v13

Tasks