Overview

overview

10

Static

static

3

7d8422e95c...18.dll

windows7-x64

10

7d8422e95c...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7d8422e95c945834ef0d2c2d1a5da406_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240528-s8611sag6y

  • MD5

    7d8422e95c945834ef0d2c2d1a5da406

  • SHA1

    fcb3c26d783a93f5df79603d75d0630eb47a204e

  • SHA256

    32c675eb9661847dcc21df8fc6c0f65f82f89760192cee09abf6011404aa5b93

  • SHA512

    c6f6c6fad405937b2eb36fbe522f7c58dd874e22b7ba909a7f2350a4f51eb49c34cd257647f5b1180337a1d2f8271ab31e7fd76a0d61abebdd437b96fb70ebe3

  • SSDEEP

    98304:TDqPoBhz1aRxcSUDk36SAEdhvxWa9P5cyAVp2H:TDqPe1Cxcxk3ZAEUadiyc4H

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      7d8422e95c945834ef0d2c2d1a5da406_JaffaCakes118

    • Size

      5.0MB

    • MD5

      7d8422e95c945834ef0d2c2d1a5da406

    • SHA1

      fcb3c26d783a93f5df79603d75d0630eb47a204e

    • SHA256

      32c675eb9661847dcc21df8fc6c0f65f82f89760192cee09abf6011404aa5b93

    • SHA512

      c6f6c6fad405937b2eb36fbe522f7c58dd874e22b7ba909a7f2350a4f51eb49c34cd257647f5b1180337a1d2f8271ab31e7fd76a0d61abebdd437b96fb70ebe3

    • SSDEEP

      98304:TDqPoBhz1aRxcSUDk36SAEdhvxWa9P5cyAVp2H:TDqPe1Cxcxk3ZAEUadiyc4H

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3205) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks