Overview

overview

10

Static

static

3

75e24aea15...18.dll

windows7-x64

10

75e24aea15...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    75e24aea15162245448361892ea979d7_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240526-skhzaaaf5w

  • MD5

    75e24aea15162245448361892ea979d7

  • SHA1

    eb45e80dab5f0a686701cb97ea3bbece94f467db

  • SHA256

    22f08fa4efaf2bd2d87ca337d1b5641519725640f40d190fdcd3875e3b95e999

  • SHA512

    1bedbf28adb48e5fdadf5d8635c61462edfd716ba9a9b6ce1227daa280d365ab48510024557f54282891b2e8523f600c5a1fead6cbf78e3269e97e865b337a1c

  • SSDEEP

    49152:znAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAA:TDqPoBhz1aRxcSUDk36SA

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      75e24aea15162245448361892ea979d7_JaffaCakes118

    • Size

      5.0MB

    • MD5

      75e24aea15162245448361892ea979d7

    • SHA1

      eb45e80dab5f0a686701cb97ea3bbece94f467db

    • SHA256

      22f08fa4efaf2bd2d87ca337d1b5641519725640f40d190fdcd3875e3b95e999

    • SHA512

      1bedbf28adb48e5fdadf5d8635c61462edfd716ba9a9b6ce1227daa280d365ab48510024557f54282891b2e8523f600c5a1fead6cbf78e3269e97e865b337a1c

    • SSDEEP

      49152:znAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAA:TDqPoBhz1aRxcSUDk36SA

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3282) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks