Overview

overview

10

Static

static

3

73f6ac7752...18.dll

windows7-x64

10

73f6ac7752...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    73f6ac7752f1f9e50141593c22e0f632_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240526-b8b27sae4x

  • MD5

    73f6ac7752f1f9e50141593c22e0f632

  • SHA1

    6d7d5a355cbf511e95c99e8f4bc4f594ce3fbf73

  • SHA256

    84040953607aff7a9da2b43fcc2286e88b0bc6393a49e410c5080090cd85d3f3

  • SHA512

    4bcf64d5717dfd8761e47cbc79945370a93d36231602c860d30b246618914181f2dcdc34a3f336021fd2a2cfcd77383aa252a13846048e013816f7bc73e9363d

  • SSDEEP

    98304:+DqPoBh9cSUDk36SAEdhvxWa9j93R8yAVp2H:+DqP8cxk3ZAEUabR8yc4H

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      73f6ac7752f1f9e50141593c22e0f632_JaffaCakes118

    • Size

      5.0MB

    • MD5

      73f6ac7752f1f9e50141593c22e0f632

    • SHA1

      6d7d5a355cbf511e95c99e8f4bc4f594ce3fbf73

    • SHA256

      84040953607aff7a9da2b43fcc2286e88b0bc6393a49e410c5080090cd85d3f3

    • SHA512

      4bcf64d5717dfd8761e47cbc79945370a93d36231602c860d30b246618914181f2dcdc34a3f336021fd2a2cfcd77383aa252a13846048e013816f7bc73e9363d

    • SSDEEP

      98304:+DqPoBh9cSUDk36SAEdhvxWa9j93R8yAVp2H:+DqP8cxk3ZAEUabR8yc4H

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3237) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks