Overview

overview

10

Static

static

3

7d0567883a...18.dll

windows7-x64

10

7d0567883a...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7d0567883ab93d613803265d2f83fefa_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240528-p4frgsfc29

  • MD5

    7d0567883ab93d613803265d2f83fefa

  • SHA1

    d0df08ce0011530a017f33f6c7126ae2afcbd0c3

  • SHA256

    4a8c42d7acc9dcfc22b066bf353c7d225ad9535a14453bb2a9393f3c25b6a08d

  • SHA512

    43c2d001194eb66a1f4ab669b305ed9de0937ee4ce8cdeed0ef1a47b7fd0a6e6745e7630685ae02fea07f84c656852888260b6aaa2affaa091a4ad17d2a5032f

  • SSDEEP

    98304:+DqPoBhz1aRxcSUDk36SAEdhvxWa9P5j:+DqPe1Cxcxk3ZAEUadN

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      7d0567883ab93d613803265d2f83fefa_JaffaCakes118

    • Size

      5.0MB

    • MD5

      7d0567883ab93d613803265d2f83fefa

    • SHA1

      d0df08ce0011530a017f33f6c7126ae2afcbd0c3

    • SHA256

      4a8c42d7acc9dcfc22b066bf353c7d225ad9535a14453bb2a9393f3c25b6a08d

    • SHA512

      43c2d001194eb66a1f4ab669b305ed9de0937ee4ce8cdeed0ef1a47b7fd0a6e6745e7630685ae02fea07f84c656852888260b6aaa2affaa091a4ad17d2a5032f

    • SSDEEP

      98304:+DqPoBhz1aRxcSUDk36SAEdhvxWa9P5j:+DqPe1Cxcxk3ZAEUadN

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3199) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks