Overview

overview

10

Static

static

3

61465c1598...18.dll

windows7-x64

10

61465c1598...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    61465c15986aed38bf65441bf98c3648_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240520-3bsggaag75

  • MD5

    61465c15986aed38bf65441bf98c3648

  • SHA1

    063ad2bc8a7016d83f3754cb4f298d1392c64b88

  • SHA256

    4f2295253243f67e9d4cae7499c51a7eeec879aa4b787f6e3ef47b45602b15d4

  • SHA512

    827ba0bbc83c1fa3bac0092a95758ec8131fee2455bc96a2dd30e41f5a52482caecbea5f064f02c802ce77b2a6d810a27dbce77c5b4c822c7663f74cf0d4ce62

  • SSDEEP

    49152:SnAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAAVAMEcaEau3R8yA:+DqPoBhz1aRxcSUDk36SAC593R8yA

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      61465c15986aed38bf65441bf98c3648_JaffaCakes118

    • Size

      5.0MB

    • MD5

      61465c15986aed38bf65441bf98c3648

    • SHA1

      063ad2bc8a7016d83f3754cb4f298d1392c64b88

    • SHA256

      4f2295253243f67e9d4cae7499c51a7eeec879aa4b787f6e3ef47b45602b15d4

    • SHA512

      827ba0bbc83c1fa3bac0092a95758ec8131fee2455bc96a2dd30e41f5a52482caecbea5f064f02c802ce77b2a6d810a27dbce77c5b4c822c7663f74cf0d4ce62

    • SSDEEP

      49152:SnAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAAVAMEcaEau3R8yA:+DqPoBhz1aRxcSUDk36SAC593R8yA

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3247) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks