Overview

overview

10

Static

static

3

58e4dd302e...18.dll

windows7-x64

10

58e4dd302e...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    58e4dd302ee80981a611575f66e97a42_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240519-gqapbade9w

  • MD5

    58e4dd302ee80981a611575f66e97a42

  • SHA1

    c686c2bfd1b97355f4bc0503ede39e0878bb156e

  • SHA256

    cf2b25d102663d07f13719f79964104a3259d33742fdbc04bf23e7aa3159da7a

  • SHA512

    00383c19ad3d5e4f35c5a63a7dece53d76af3ceb4f1c5dfca7d5223d79417dfbb0da365ee574d682d4d61b4fc0e3981d2293441a35c05950e9217dc446dd0fb4

  • SSDEEP

    98304:+DqPoBhzecSUDk36SAEdhvxWa9P59H2H:+DqPeecxk3ZAEUadyH

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      58e4dd302ee80981a611575f66e97a42_JaffaCakes118

    • Size

      5.0MB

    • MD5

      58e4dd302ee80981a611575f66e97a42

    • SHA1

      c686c2bfd1b97355f4bc0503ede39e0878bb156e

    • SHA256

      cf2b25d102663d07f13719f79964104a3259d33742fdbc04bf23e7aa3159da7a

    • SHA512

      00383c19ad3d5e4f35c5a63a7dece53d76af3ceb4f1c5dfca7d5223d79417dfbb0da365ee574d682d4d61b4fc0e3981d2293441a35c05950e9217dc446dd0fb4

    • SSDEEP

      98304:+DqPoBhzecSUDk36SAEdhvxWa9P59H2H:+DqPeecxk3ZAEUadyH

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3168) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks