Overview

overview

10

Static

static

3

6a41440d84...18.dll

windows7-x64

10

6a41440d84...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6a41440d8497605a379b20f36a9ae796_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240523-jrdhpsaa8w

  • MD5

    6a41440d8497605a379b20f36a9ae796

  • SHA1

    fc0ff118a6e5c27c077aeb70eb6469ac4e7a8f2b

  • SHA256

    05b516f148b27d305ea56071e3f468769cde81fff1ba70961b464cd5823a5d3e

  • SHA512

    10b4b81379e79139a7bfde342109c4139327352c56128b110b8eb90c67891c62a01261925a42925b4d2e0fcb568897a7154c31132eca9f976fa1773ada155346

  • SSDEEP

    98304:d8qPoBhz1aRxcSUDk36SAEdhvxWa9P5+:d8qPe1Cxcxk3ZAEUadI

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      6a41440d8497605a379b20f36a9ae796_JaffaCakes118

    • Size

      5.0MB

    • MD5

      6a41440d8497605a379b20f36a9ae796

    • SHA1

      fc0ff118a6e5c27c077aeb70eb6469ac4e7a8f2b

    • SHA256

      05b516f148b27d305ea56071e3f468769cde81fff1ba70961b464cd5823a5d3e

    • SHA512

      10b4b81379e79139a7bfde342109c4139327352c56128b110b8eb90c67891c62a01261925a42925b4d2e0fcb568897a7154c31132eca9f976fa1773ada155346

    • SSDEEP

      98304:d8qPoBhz1aRxcSUDk36SAEdhvxWa9P5+:d8qPe1Cxcxk3ZAEUadI

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3335) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks