Overview

overview

10

Static

static

3

599ba047a5...18.dll

windows7-x64

10

599ba047a5...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    599ba047a5f78a122a99547862b692f8_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240519-k1zyqsbd6y

  • MD5

    599ba047a5f78a122a99547862b692f8

  • SHA1

    5131f90bd2a8831034da0c8ae81812f629c2d51e

  • SHA256

    83c499d4faeaf878a311c1f68ce8795a86d46f9bfc1599010394aa3106daba60

  • SHA512

    ff6ba51959950b510ad3805680cda5bcc2676454f73ee2bf1ccad41610909365e4aedb15bb9681c602bdbb051d4196a1d859182cb6c3ad24b75756b043d7b57b

  • SSDEEP

    98304:d8qPoZ1aRxcSUDk36SAEdhvxWa9P593R8yAVp2H:d8qPU1Cxcxk3ZAEUadzR8yc4H

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      599ba047a5f78a122a99547862b692f8_JaffaCakes118

    • Size

      5.0MB

    • MD5

      599ba047a5f78a122a99547862b692f8

    • SHA1

      5131f90bd2a8831034da0c8ae81812f629c2d51e

    • SHA256

      83c499d4faeaf878a311c1f68ce8795a86d46f9bfc1599010394aa3106daba60

    • SHA512

      ff6ba51959950b510ad3805680cda5bcc2676454f73ee2bf1ccad41610909365e4aedb15bb9681c602bdbb051d4196a1d859182cb6c3ad24b75756b043d7b57b

    • SSDEEP

      98304:d8qPoZ1aRxcSUDk36SAEdhvxWa9P593R8yAVp2H:d8qPU1Cxcxk3ZAEUadzR8yc4H

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3295) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks