Overview

overview

10

Static

static

3

58b7152ec0...18.dll

windows7-x64

10

58b7152ec0...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    58b7152ec0599aaf336db5f8df6e3647_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240519-fv9tjabh51

  • MD5

    58b7152ec0599aaf336db5f8df6e3647

  • SHA1

    bfcafc318679ec430a5d88d32f9476db35c108af

  • SHA256

    e82f6b644a96bf2319c217eab06d7fc0c2e4b1a49d15895e7959231e4521da86

  • SHA512

    e6df2efd598a58209c361d226c1a5caab6619a7a4911f5a9c3549ee1c447e9068cffc6dc906511ecc1db61c9b3c65067479a30ed0de59da801f9acbec38fa520

  • SSDEEP

    98304:TDqPoBhz1aRxcSUZk36SAEdhvxWa9P5uR8yAVp2H:TDqPe1Cxc7k3ZAEUadgR8yc4H

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      58b7152ec0599aaf336db5f8df6e3647_JaffaCakes118

    • Size

      5.0MB

    • MD5

      58b7152ec0599aaf336db5f8df6e3647

    • SHA1

      bfcafc318679ec430a5d88d32f9476db35c108af

    • SHA256

      e82f6b644a96bf2319c217eab06d7fc0c2e4b1a49d15895e7959231e4521da86

    • SHA512

      e6df2efd598a58209c361d226c1a5caab6619a7a4911f5a9c3549ee1c447e9068cffc6dc906511ecc1db61c9b3c65067479a30ed0de59da801f9acbec38fa520

    • SSDEEP

      98304:TDqPoBhz1aRxcSUZk36SAEdhvxWa9P5uR8yAVp2H:TDqPe1Cxc7k3ZAEUadgR8yc4H

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3255) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks