Overview

overview

10

Static

static

3

75c41f9cb3...18.dll

windows7-x64

10

75c41f9cb3...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    75c41f9cb3b0920cbdf6a6d58bff2639_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240526-rnpesshc51

  • MD5

    75c41f9cb3b0920cbdf6a6d58bff2639

  • SHA1

    9a8d716574ed1d45b15635d3b6edf376e1977f0f

  • SHA256

    a9fa6e9a07840936038728e94c7cd5b9c345f81d0a81622852d7f719e38f2415

  • SHA512

    52f77dd5ceecc4b202cc3ead37a6f898a496172611433ead8a33127b83586daf8b0889bce89d28ecf5dfeed90eadb7cb9f025b963f4ad90bcc427b4ac2b94ec1

  • SSDEEP

    98304:TDqPoBhz1aRxcSUDk36SAkhu3R8yAVp2p:TDqPe1Cxcxk3ZAzR8yc4p

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      75c41f9cb3b0920cbdf6a6d58bff2639_JaffaCakes118

    • Size

      5.0MB

    • MD5

      75c41f9cb3b0920cbdf6a6d58bff2639

    • SHA1

      9a8d716574ed1d45b15635d3b6edf376e1977f0f

    • SHA256

      a9fa6e9a07840936038728e94c7cd5b9c345f81d0a81622852d7f719e38f2415

    • SHA512

      52f77dd5ceecc4b202cc3ead37a6f898a496172611433ead8a33127b83586daf8b0889bce89d28ecf5dfeed90eadb7cb9f025b963f4ad90bcc427b4ac2b94ec1

    • SSDEEP

      98304:TDqPoBhz1aRxcSUDk36SAkhu3R8yAVp2p:TDqPe1Cxcxk3ZAzR8yc4p

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3321) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks