Overview

overview

10

Static

static

3

76c2f0bc0c...18.dll

windows7-x64

10

76c2f0bc0c...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    76c2f0bc0c37fe765f7c147cb72edb62_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240526-zf1f4abd6z

  • MD5

    76c2f0bc0c37fe765f7c147cb72edb62

  • SHA1

    68d778d4da69cd5722cc537a965668dfdce2bd4f

  • SHA256

    847521d5b3faff34a8f6313506d6f232c9fd99c65bea3f3305d994679ead6216

  • SHA512

    c0ff78e4e838fa3e6694f5df06d47d38ac03343e79564f7966cfdddefc964139b4a470f7fbf18ff294983699feadeff576355b2746afb76048aa5172a9bc76d7

  • SSDEEP

    24576:SbLgddQhfdmMSirYbcMNgef0QeQjG/D8kIOASk+RdhAdmv1LJMfcH9PO6L:SnAQqMSPbcBVQej/ZAARdhnvxJM0H9

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      76c2f0bc0c37fe765f7c147cb72edb62_JaffaCakes118

    • Size

      5.0MB

    • MD5

      76c2f0bc0c37fe765f7c147cb72edb62

    • SHA1

      68d778d4da69cd5722cc537a965668dfdce2bd4f

    • SHA256

      847521d5b3faff34a8f6313506d6f232c9fd99c65bea3f3305d994679ead6216

    • SHA512

      c0ff78e4e838fa3e6694f5df06d47d38ac03343e79564f7966cfdddefc964139b4a470f7fbf18ff294983699feadeff576355b2746afb76048aa5172a9bc76d7

    • SSDEEP

      24576:SbLgddQhfdmMSirYbcMNgef0QeQjG/D8kIOASk+RdhAdmv1LJMfcH9PO6L:SnAQqMSPbcBVQej/ZAARdhnvxJM0H9

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3327) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks