Overview

overview

10

Static

static

3

5aaa734ecd...18.dll

windows7-x64

10

5aaa734ecd...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5aaa734ecd61d2a8faf15c843cd86709_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240519-wek38sac24

  • MD5

    5aaa734ecd61d2a8faf15c843cd86709

  • SHA1

    5f796929bc7301c15c7e80b6ad232c8076c99de1

  • SHA256

    d7a72ff750c8efe9e3e5fb8fddd60c250b3cab76118ac835ea306e1e9f830412

  • SHA512

    ca720bc29b066b4c29bb48047af0b97fe7275a94ad4f41a97b102383c254211481da8c8bb23c249214732896580f7c1886da0101fe7597b598c427faaf136ea9

  • SSDEEP

    49152:SnAQqMSPbcBVQej/1INRx+TSqTdd1HkQ:+DqPoBhz1aRxcSUZk

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      5aaa734ecd61d2a8faf15c843cd86709_JaffaCakes118

    • Size

      5.0MB

    • MD5

      5aaa734ecd61d2a8faf15c843cd86709

    • SHA1

      5f796929bc7301c15c7e80b6ad232c8076c99de1

    • SHA256

      d7a72ff750c8efe9e3e5fb8fddd60c250b3cab76118ac835ea306e1e9f830412

    • SHA512

      ca720bc29b066b4c29bb48047af0b97fe7275a94ad4f41a97b102383c254211481da8c8bb23c249214732896580f7c1886da0101fe7597b598c427faaf136ea9

    • SSDEEP

      49152:SnAQqMSPbcBVQej/1INRx+TSqTdd1HkQ:+DqPoBhz1aRxcSUZk

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3280) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks