Overview

overview

10

Static

static

3

7086808c7c...18.dll

windows7-x64

10

7086808c7c...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7086808c7c91e32ed4516e7a0875ded7_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240525-chhbzaag9x

  • MD5

    7086808c7c91e32ed4516e7a0875ded7

  • SHA1

    57a46df867d7edd63f4cd65aeac2b64cf686ebfa

  • SHA256

    b4ce551d5c51cfaca6376addb4bf1d8dbfa591cd8ed30b0ed7e6b5404256c711

  • SHA512

    c2f118f72a42bc66fdc210b5e162359851b9472862533b71a6ab076ac11ac7f94d14fd679d1a36164532ea435a91f0ff2d3efdc976b2926b1edc67953a5ec3be

  • SSDEEP

    98304:+DqPoBhz1aRxcSUDk36SAEdhvxWa9P593RRI:+DqPe1Cxcxk3ZAEUadzRR

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      7086808c7c91e32ed4516e7a0875ded7_JaffaCakes118

    • Size

      5.0MB

    • MD5

      7086808c7c91e32ed4516e7a0875ded7

    • SHA1

      57a46df867d7edd63f4cd65aeac2b64cf686ebfa

    • SHA256

      b4ce551d5c51cfaca6376addb4bf1d8dbfa591cd8ed30b0ed7e6b5404256c711

    • SHA512

      c2f118f72a42bc66fdc210b5e162359851b9472862533b71a6ab076ac11ac7f94d14fd679d1a36164532ea435a91f0ff2d3efdc976b2926b1edc67953a5ec3be

    • SSDEEP

      98304:+DqPoBhz1aRxcSUDk36SAEdhvxWa9P593RRI:+DqPe1Cxcxk3ZAEUadzRR

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3189) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks