Overview

overview

10

Static

static

3

77a34248cc...18.dll

windows7-x64

10

77a34248cc...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    77a34248cc10e2188124973fcb3952a9_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240527-c49cksdd2z

  • MD5

    77a34248cc10e2188124973fcb3952a9

  • SHA1

    3aa9b023954894a0eed23fec6ba33796290cc5b1

  • SHA256

    83d820c4d5ec752c466bf49490e3c42de9db44dffd76b7eb869fed7653b6eac1

  • SHA512

    eab4ee90f11ba4f89479f012afb706646de671b1dcd531b98fabf7f7453fa12cb1cee18111bbe4f018a4681290915d44492751927fa32b09ec8b8b47de53fecb

  • SSDEEP

    98304:T8qPoBhz1aRxcSUDk36SAEdhvxWa9P59Uc/F:T8qPe1Cxcxk3ZAEUadvF

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      77a34248cc10e2188124973fcb3952a9_JaffaCakes118

    • Size

      5.0MB

    • MD5

      77a34248cc10e2188124973fcb3952a9

    • SHA1

      3aa9b023954894a0eed23fec6ba33796290cc5b1

    • SHA256

      83d820c4d5ec752c466bf49490e3c42de9db44dffd76b7eb869fed7653b6eac1

    • SHA512

      eab4ee90f11ba4f89479f012afb706646de671b1dcd531b98fabf7f7453fa12cb1cee18111bbe4f018a4681290915d44492751927fa32b09ec8b8b47de53fecb

    • SSDEEP

      98304:T8qPoBhz1aRxcSUDk36SAEdhvxWa9P59Uc/F:T8qPe1Cxcxk3ZAEUadvF

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3168) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks