Overview

overview

10

Static

static

3

7148c1cc72...18.dll

windows7-x64

10

7148c1cc72...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7148c1cc72f9108fd46ca44743ec20cd_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240525-jhpjlsag31

  • MD5

    7148c1cc72f9108fd46ca44743ec20cd

  • SHA1

    db062fd223246c5398b9d16908c77d88d568cec1

  • SHA256

    87ba3542b2055ab6223f8d9178b1d624406782f607f7a35a02a16272485ba01a

  • SHA512

    ad5443c3ea298fe47a299ce7bf23927005e427d0a1b6c480fa8377ad9a04ce9f687bc85bec9f51ad091abc88bfc761450a2de24148649dffd880e1a07c832991

  • SSDEEP

    24576:zbLgddQhfdmMSirYbcMNgef0QeQjG/D8kIqRYoAdNLKz6626M+vbOSSqTP:znAQqMSPbcBVQej/1INRx+TSqT

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      7148c1cc72f9108fd46ca44743ec20cd_JaffaCakes118

    • Size

      5.0MB

    • MD5

      7148c1cc72f9108fd46ca44743ec20cd

    • SHA1

      db062fd223246c5398b9d16908c77d88d568cec1

    • SHA256

      87ba3542b2055ab6223f8d9178b1d624406782f607f7a35a02a16272485ba01a

    • SHA512

      ad5443c3ea298fe47a299ce7bf23927005e427d0a1b6c480fa8377ad9a04ce9f687bc85bec9f51ad091abc88bfc761450a2de24148649dffd880e1a07c832991

    • SSDEEP

      24576:zbLgddQhfdmMSirYbcMNgef0QeQjG/D8kIqRYoAdNLKz6626M+vbOSSqTP:znAQqMSPbcBVQej/1INRx+TSqT

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3294) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks