Resubmissions

17-05-2024 08:42

240517-kl88vshh51 10

17-05-2024 08:29

240517-kd3q4shh34 10

General

  • Target

    4f2bfd712a01aebb799326e1e1db66ff_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240517-kl88vshh51

  • MD5

    4f2bfd712a01aebb799326e1e1db66ff

  • SHA1

    21b9dda55b3d7444b82568903d67b2d984440d08

  • SHA256

    9bde5e19c245919890fee8337a38a915637eb962134858f4ba1cf52fc77e04bf

  • SHA512

    f99145a414d49b6896d98e1f435b269711f51fd54e988dab974a64a77cadd37d63856eff04b779421e116f60c17be4700f1d87b54c011fb77d290561c40d885f

  • SSDEEP

    98304:+DqPoBhz1aRxcSUDk36SAEdhvxWa9E3R8yAVp2H:+DqPe1Cxcxk3ZAEUaUR8yc4H

Malware Config

Targets

    • Target

      4f2bfd712a01aebb799326e1e1db66ff_JaffaCakes118

    • Size

      5.0MB

    • MD5

      4f2bfd712a01aebb799326e1e1db66ff

    • SHA1

      21b9dda55b3d7444b82568903d67b2d984440d08

    • SHA256

      9bde5e19c245919890fee8337a38a915637eb962134858f4ba1cf52fc77e04bf

    • SHA512

      f99145a414d49b6896d98e1f435b269711f51fd54e988dab974a64a77cadd37d63856eff04b779421e116f60c17be4700f1d87b54c011fb77d290561c40d885f

    • SSDEEP

      98304:+DqPoBhz1aRxcSUDk36SAEdhvxWa9E3R8yAVp2H:+DqPe1Cxcxk3ZAEUaUR8yc4H

    • Wannacry

      WannaCry is a ransomware cryptoworm.

    • Contacts a large (3232) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

MITRE ATT&CK Enterprise v15

Tasks