Overview

overview

10

Static

static

3

5f57d4d7c5...18.dll

windows7-x64

10

5f57d4d7c5...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5f57d4d7c53e14dd87a88bbe181d9d00_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240520-qvlf2sdb7s

  • MD5

    5f57d4d7c53e14dd87a88bbe181d9d00

  • SHA1

    143026c0bd482834da35f214542070b05a0dbcba

  • SHA256

    0f9060ba65a98d39a9b4c1ebb20b9792a45a553bf94e04fe218abe7bfc7db336

  • SHA512

    0f529ceb51fba1588654632e2b52832fe9e0b7ba70d0239ca63bbc616206bd4b8fff5d921fb672dfc1dd38195931dccd95db0ec3155ce7167006e084439ed2c4

  • SSDEEP

    24576:zbLgddQhfdmMSirYbcMNgef0QeQjG/D8ki:znAQqMSPbcBVQej/

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      5f57d4d7c53e14dd87a88bbe181d9d00_JaffaCakes118

    • Size

      5.0MB

    • MD5

      5f57d4d7c53e14dd87a88bbe181d9d00

    • SHA1

      143026c0bd482834da35f214542070b05a0dbcba

    • SHA256

      0f9060ba65a98d39a9b4c1ebb20b9792a45a553bf94e04fe218abe7bfc7db336

    • SHA512

      0f529ceb51fba1588654632e2b52832fe9e0b7ba70d0239ca63bbc616206bd4b8fff5d921fb672dfc1dd38195931dccd95db0ec3155ce7167006e084439ed2c4

    • SSDEEP

      24576:zbLgddQhfdmMSirYbcMNgef0QeQjG/D8ki:znAQqMSPbcBVQej/

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3329) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks