Overview

overview

10

Static

static

3

7c83567cd1...18.dll

windows7-x64

10

7c83567cd1...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7c83567cd1c14f11e4385367af25706a_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240528-lprnnafe35

  • MD5

    7c83567cd1c14f11e4385367af25706a

  • SHA1

    8b4a7a619a77392a651d1ffc9be2e6264cf28bdb

  • SHA256

    3f4aa3570466ceef50ae01af799166eecd4ba8bf996e2c64db04662542f2cffb

  • SHA512

    2a4f99595446a8278d54c0876695cf55c925249e7f4f0b629cb280857983e2e7be80ca49c906a5ed4360d8e851acbc5693005f5117a9031bee05a4094813c0c0

  • SSDEEP

    24576:SbLgddQhfdmMSirYbcMNgef0QeQjG/D8kIqRYoAdNLKz6626M+vbOSSqTPVX:SnAQqMSPbcBVQej/1INRx+TSqTdX

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      7c83567cd1c14f11e4385367af25706a_JaffaCakes118

    • Size

      5.0MB

    • MD5

      7c83567cd1c14f11e4385367af25706a

    • SHA1

      8b4a7a619a77392a651d1ffc9be2e6264cf28bdb

    • SHA256

      3f4aa3570466ceef50ae01af799166eecd4ba8bf996e2c64db04662542f2cffb

    • SHA512

      2a4f99595446a8278d54c0876695cf55c925249e7f4f0b629cb280857983e2e7be80ca49c906a5ed4360d8e851acbc5693005f5117a9031bee05a4094813c0c0

    • SSDEEP

      24576:SbLgddQhfdmMSirYbcMNgef0QeQjG/D8kIqRYoAdNLKz6626M+vbOSSqTPVX:SnAQqMSPbcBVQej/1INRx+TSqTdX

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3228) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks