Overview

overview

10

Static

static

3

63521d031b...18.exe

windows7-x64

10

63521d031b...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    63521d031b935bda1faddb7a0fe189e9_JaffaCakes118

  • Size

    3.6MB

  • Sample

    240521-pt8draea9z

  • MD5

    63521d031b935bda1faddb7a0fe189e9

  • SHA1

    485fcd1b636d5885a8edc0961563ddeeda83439a

  • SHA256

    779510ae2d0f4e114c09485c50b500e6ceff57080f7ccbe1475ef65a9059dbf8

  • SHA512

    1823133424b1d9037e8057c9e61b1bfa41f37a6a7c37a7c77f10ed36168753c7ba6269b175bf69ccc959415d43cda82aa21f2edafb2d3b354e1b0801ad70443e

  • SSDEEP

    98304:XDqPoBKaRxcSUDk36SAEdhvxWa9P593R8yAVp2HI:XDqPzCxcxk3ZAEUadzR8yc4HI

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      63521d031b935bda1faddb7a0fe189e9_JaffaCakes118

    • Size

      3.6MB

    • MD5

      63521d031b935bda1faddb7a0fe189e9

    • SHA1

      485fcd1b636d5885a8edc0961563ddeeda83439a

    • SHA256

      779510ae2d0f4e114c09485c50b500e6ceff57080f7ccbe1475ef65a9059dbf8

    • SHA512

      1823133424b1d9037e8057c9e61b1bfa41f37a6a7c37a7c77f10ed36168753c7ba6269b175bf69ccc959415d43cda82aa21f2edafb2d3b354e1b0801ad70443e

    • SSDEEP

      98304:XDqPoBKaRxcSUDk36SAEdhvxWa9P593R8yAVp2HI:XDqPzCxcxk3ZAEUadzR8yc4HI

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3298) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks