Overview

overview

10

Static

static

3

55cbc01a52...18.dll

windows7-x64

10

55cbc01a52...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    55cbc01a52fd5200cd82213465f27996_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240518-veyhwsdd3z

  • MD5

    55cbc01a52fd5200cd82213465f27996

  • SHA1

    a217c58a62f13a8bfcc7462606078e1bf1f2f405

  • SHA256

    22bbde8f39fab4ba56329699e65d93f8cff435b3f39e7b226afc268546ea8cef

  • SHA512

    2435798f42d1400945e7bf5287bd54e717a157a69060390bc4ff9379b5f5256faa8ba478f9f7aec6eb30dd335de16bfb627a636d6fec01ee8d22b9042e764d85

  • SSDEEP

    24576:SbLgddQhfdmMSirYbcMNgef0QeQjG/D8kIqpbOSSqTPVXmiHkQg6eX6SASk+Kdq/:SnAQqMSPbcBVQej/JSqTdX1HkQo6SAA

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      55cbc01a52fd5200cd82213465f27996_JaffaCakes118

    • Size

      5.0MB

    • MD5

      55cbc01a52fd5200cd82213465f27996

    • SHA1

      a217c58a62f13a8bfcc7462606078e1bf1f2f405

    • SHA256

      22bbde8f39fab4ba56329699e65d93f8cff435b3f39e7b226afc268546ea8cef

    • SHA512

      2435798f42d1400945e7bf5287bd54e717a157a69060390bc4ff9379b5f5256faa8ba478f9f7aec6eb30dd335de16bfb627a636d6fec01ee8d22b9042e764d85

    • SSDEEP

      24576:SbLgddQhfdmMSirYbcMNgef0QeQjG/D8kIqpbOSSqTPVXmiHkQg6eX6SASk+Kdq/:SnAQqMSPbcBVQej/JSqTdX1HkQo6SAA

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3271) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks