Overview

overview

10

Static

static

3

64034db074...18.dll

windows7-x64

10

64034db074...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    64034db074c53e09df4d57fc7a26a6f2_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240521-t9mjfaca65

  • MD5

    64034db074c53e09df4d57fc7a26a6f2

  • SHA1

    60d16fa7ffca1448db0da995a24eae901466c61a

  • SHA256

    57ae6fa8fafc0e1746a65b463fd3be1032d7feb04f72ae65a0cb72659f7e3aae

  • SHA512

    b12da23d2e46626bd828158b306ba5503f499c7c37802bd06b7c2fe83df2983f97b6cc59b06c12896f2b6ba3034f0214d55ee356a96430894af3af9d5247d034

  • SSDEEP

    24576:JbLgdeQhfdmMSirYbcMNgef0QeQjGopcL7nEaut/8uME7A4kqAH1pNZtA0p+9XEk:JnjQqMSPbcBVQejoaEau3R8yAH1plAH

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      64034db074c53e09df4d57fc7a26a6f2_JaffaCakes118

    • Size

      5.0MB

    • MD5

      64034db074c53e09df4d57fc7a26a6f2

    • SHA1

      60d16fa7ffca1448db0da995a24eae901466c61a

    • SHA256

      57ae6fa8fafc0e1746a65b463fd3be1032d7feb04f72ae65a0cb72659f7e3aae

    • SHA512

      b12da23d2e46626bd828158b306ba5503f499c7c37802bd06b7c2fe83df2983f97b6cc59b06c12896f2b6ba3034f0214d55ee356a96430894af3af9d5247d034

    • SSDEEP

      24576:JbLgdeQhfdmMSirYbcMNgef0QeQjGopcL7nEaut/8uME7A4kqAH1pNZtA0p+9XEk:JnjQqMSPbcBVQejoaEau3R8yAH1plAH

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3333) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks