Overview

overview

10

Static

static

3

5c7fcd7038...18.dll

windows7-x64

10

5c7fcd7038...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5c7fcd7038bd79f135f1411b8e9a40cf_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240520-bx5v5sdh6z

  • MD5

    5c7fcd7038bd79f135f1411b8e9a40cf

  • SHA1

    02c7a57b9e3725e4d0da711657b433f35dda7ee7

  • SHA256

    4434d6c1a3d738888f8c7cbe2e6a330f29e72a7968ed396943a6cb06c89c6dbf

  • SHA512

    f69be4df427061f8e3c10252724d99ca6c868c6560a67657f69aa5dcfee09e15b2479fff5955e10e658af05390d2d74d0a20ad6d7cfba283df8a5373fc0cd8cf

  • SSDEEP

    49152:SnAQqMSPbcBVQej/1INRx+TSqTdX1HkQRkRiwt/Zx+:+DqPoBhz1aRxcSUDkqkkGZx

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      5c7fcd7038bd79f135f1411b8e9a40cf_JaffaCakes118

    • Size

      5.0MB

    • MD5

      5c7fcd7038bd79f135f1411b8e9a40cf

    • SHA1

      02c7a57b9e3725e4d0da711657b433f35dda7ee7

    • SHA256

      4434d6c1a3d738888f8c7cbe2e6a330f29e72a7968ed396943a6cb06c89c6dbf

    • SHA512

      f69be4df427061f8e3c10252724d99ca6c868c6560a67657f69aa5dcfee09e15b2479fff5955e10e658af05390d2d74d0a20ad6d7cfba283df8a5373fc0cd8cf

    • SSDEEP

      49152:SnAQqMSPbcBVQej/1INRx+TSqTdX1HkQRkRiwt/Zx+:+DqPoBhz1aRxcSUDkqkkGZx

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3203) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks