Overview

overview

10

Static

static

3

5ac6c60b8d...18.dll

windows7-x64

10

5ac6c60b8d...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5ac6c60b8d52c546cf33cc04eda2fb18_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240519-w14gpsbe6v

  • MD5

    5ac6c60b8d52c546cf33cc04eda2fb18

  • SHA1

    7b4968ef7409ccae84ac1bd22814dd5d41069f0b

  • SHA256

    e0475dd17f50e05ef796dc93da5e2e8f65567998ed4b4783eb7865f2be82b023

  • SHA512

    5cf29473d2f0a14c3b51b22088d16ecf81c3ca050348a91187fcff357513da071a383882599d6f8f9ea2a7c0a6d1c53081f43a3f44d33c78a3a66f834a6cb645

  • SSDEEP

    12288:yebLgPlu+QhMbaIMu7L5NVErCA4z2g6rTcbckPU82900Ve7:zbLgddQhfdmMSirYbcMNge

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      5ac6c60b8d52c546cf33cc04eda2fb18_JaffaCakes118

    • Size

      5.0MB

    • MD5

      5ac6c60b8d52c546cf33cc04eda2fb18

    • SHA1

      7b4968ef7409ccae84ac1bd22814dd5d41069f0b

    • SHA256

      e0475dd17f50e05ef796dc93da5e2e8f65567998ed4b4783eb7865f2be82b023

    • SHA512

      5cf29473d2f0a14c3b51b22088d16ecf81c3ca050348a91187fcff357513da071a383882599d6f8f9ea2a7c0a6d1c53081f43a3f44d33c78a3a66f834a6cb645

    • SSDEEP

      12288:yebLgPlu+QhMbaIMu7L5NVErCA4z2g6rTcbckPU82900Ve7:zbLgddQhfdmMSirYbcMNge

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3083) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks