Overview

overview

10

Static

static

3

55d6d83f66...18.dll

windows7-x64

10

55d6d83f66...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    55d6d83f66f0917fba7cce7f960a18a6_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240518-vl5wjsdh92

  • MD5

    55d6d83f66f0917fba7cce7f960a18a6

  • SHA1

    83e8bb1c117a4506ac850edd7708370406091cac

  • SHA256

    e14c4af56e582c40f4ece66346fb341665fe422ec45ab490e55bf546cd799f31

  • SHA512

    1644f905a85348fcf84b318ae1bf8e67e0af49fc4d11190474d367e0b6b2712bfece1a8a944fc5d139a2af9086154d8989f839c8cf6d33fac5a174727d3e27e2

  • SSDEEP

    98304:+DqPoBhz1aRxcSUDk36SAEdhvxWa9P55Z:+DqPe1Cxcxk3ZAEUadz

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      55d6d83f66f0917fba7cce7f960a18a6_JaffaCakes118

    • Size

      5.0MB

    • MD5

      55d6d83f66f0917fba7cce7f960a18a6

    • SHA1

      83e8bb1c117a4506ac850edd7708370406091cac

    • SHA256

      e14c4af56e582c40f4ece66346fb341665fe422ec45ab490e55bf546cd799f31

    • SHA512

      1644f905a85348fcf84b318ae1bf8e67e0af49fc4d11190474d367e0b6b2712bfece1a8a944fc5d139a2af9086154d8989f839c8cf6d33fac5a174727d3e27e2

    • SSDEEP

      98304:+DqPoBhz1aRxcSUDk36SAEdhvxWa9P55Z:+DqPe1Cxcxk3ZAEUadz

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3304) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks