Overview

overview

10

Static

static

3

6b23051106...18.dll

windows7-x64

10

6b23051106...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6b23051106c6756a8e53341d0d9fff7a_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240523-q3hecsdb8s

  • MD5

    6b23051106c6756a8e53341d0d9fff7a

  • SHA1

    e008eace53673b85ffb20f1e7f002a6a0579bfa4

  • SHA256

    552efe8f5efb8129a4d833ae6ed783641cf9f471da4bacc677ae29710e4bd50a

  • SHA512

    3bb5495b996d7184f19787b099190a3cc8f76ac116238647d653feddd0abca0bcb94d10f7290238ebf2888ddb1f8d35ef7f3bb3693dc24b36033914490742377

  • SSDEEP

    98304:TDqPoBhz1aRxcSUDk36SAEdhvxWa9P5gj:TDqPe1Cxcxk3ZAEUad

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      6b23051106c6756a8e53341d0d9fff7a_JaffaCakes118

    • Size

      5.0MB

    • MD5

      6b23051106c6756a8e53341d0d9fff7a

    • SHA1

      e008eace53673b85ffb20f1e7f002a6a0579bfa4

    • SHA256

      552efe8f5efb8129a4d833ae6ed783641cf9f471da4bacc677ae29710e4bd50a

    • SHA512

      3bb5495b996d7184f19787b099190a3cc8f76ac116238647d653feddd0abca0bcb94d10f7290238ebf2888ddb1f8d35ef7f3bb3693dc24b36033914490742377

    • SSDEEP

      98304:TDqPoBhz1aRxcSUDk36SAEdhvxWa9P5gj:TDqPe1Cxcxk3ZAEUad

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3131) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks