Overview

overview

10

Static

static

3

7cd6231469...18.dll

windows7-x64

10

7cd6231469...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7cd62314699e88eb5f1fad16e4054ad4_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240528-nwsweaag74

  • MD5

    7cd62314699e88eb5f1fad16e4054ad4

  • SHA1

    179d952b83b96ff6647347cd840769cef070a3cf

  • SHA256

    aeb3230d728a899a2db6d4323641664ff724a0c6dd28c2a4083f73295deb5510

  • SHA512

    13a360bb21177860526b489dd375ba80acf4f0ce48f31249bc89cce48c36339127ff1113fec576824833fe5b046e838e5aa36c47d51a98614972941e2248b88b

  • SSDEEP

    24576:SbLgddQhfdmMSirYbcMNgef0QeQjG/D8kIqRYoAdNLKkYyqGR:SnAQqMSPbcBVQej/1IN3

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      7cd62314699e88eb5f1fad16e4054ad4_JaffaCakes118

    • Size

      5.0MB

    • MD5

      7cd62314699e88eb5f1fad16e4054ad4

    • SHA1

      179d952b83b96ff6647347cd840769cef070a3cf

    • SHA256

      aeb3230d728a899a2db6d4323641664ff724a0c6dd28c2a4083f73295deb5510

    • SHA512

      13a360bb21177860526b489dd375ba80acf4f0ce48f31249bc89cce48c36339127ff1113fec576824833fe5b046e838e5aa36c47d51a98614972941e2248b88b

    • SSDEEP

      24576:SbLgddQhfdmMSirYbcMNgef0QeQjG/D8kIqRYoAdNLKkYyqGR:SnAQqMSPbcBVQej/1IN3

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3217) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks