Overview

overview

10

Static

static

3

5c050085a1...18.dll

windows7-x64

10

5c050085a1...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5c050085a1d97d84dd083ffe5c16b997_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240519-3dk56sgg6w

  • MD5

    5c050085a1d97d84dd083ffe5c16b997

  • SHA1

    46bac5bebecdd5844458e53360d89f5b22ad181f

  • SHA256

    83c4acbb1e62f954e10aafea37f7836a584105232ffc50b6b0ba6f0763ec2a17

  • SHA512

    b94be49e7ad09ff9fd56dfb5540439340d4b0fc8150ca01d87726d1bf0f2f632d560db5d2945bcd36cd59c27d1123280545d419a27150aeafb3cb9abba3fbde8

  • SSDEEP

    12288:yebLgPlu+QhMbaIMu7L5NVErCA4z2g6rTcFIwFg:zbLgddQhfdmMSirYFIwF

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      5c050085a1d97d84dd083ffe5c16b997_JaffaCakes118

    • Size

      5.0MB

    • MD5

      5c050085a1d97d84dd083ffe5c16b997

    • SHA1

      46bac5bebecdd5844458e53360d89f5b22ad181f

    • SHA256

      83c4acbb1e62f954e10aafea37f7836a584105232ffc50b6b0ba6f0763ec2a17

    • SHA512

      b94be49e7ad09ff9fd56dfb5540439340d4b0fc8150ca01d87726d1bf0f2f632d560db5d2945bcd36cd59c27d1123280545d419a27150aeafb3cb9abba3fbde8

    • SSDEEP

      12288:yebLgPlu+QhMbaIMu7L5NVErCA4z2g6rTcFIwFg:zbLgddQhfdmMSirYFIwF

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3308) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks