Overview

overview

10

Static

static

3

7fb655b896...18.dll

windows7-x64

10

7fb655b896...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7fb655b896152fa426d3a96cbadb5614_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240529-gnw5jade23

  • MD5

    7fb655b896152fa426d3a96cbadb5614

  • SHA1

    8dfcae6ae3ad6e492424be0e012310e77ab67f26

  • SHA256

    5de6e0b877d6b134dfbb7acd502bfbc5aa6b37f888e6a845e0ee3fe83f66152e

  • SHA512

    723d320fae808dd1f4a676bd5ddccde9c4f769df4bd625dc9e8224ec794368a07bd146b80a251b091f52390d8236487f288ef746ace389573963b8140a7d80ce

  • SSDEEP

    49152:znAQqMSPbcBVQej/8nvxJM0H9PAMEcaEau3R8yAH1plAH:TDqPoBhz8vxWa9P593R8yAVp2H

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      7fb655b896152fa426d3a96cbadb5614_JaffaCakes118

    • Size

      5.0MB

    • MD5

      7fb655b896152fa426d3a96cbadb5614

    • SHA1

      8dfcae6ae3ad6e492424be0e012310e77ab67f26

    • SHA256

      5de6e0b877d6b134dfbb7acd502bfbc5aa6b37f888e6a845e0ee3fe83f66152e

    • SHA512

      723d320fae808dd1f4a676bd5ddccde9c4f769df4bd625dc9e8224ec794368a07bd146b80a251b091f52390d8236487f288ef746ace389573963b8140a7d80ce

    • SSDEEP

      49152:znAQqMSPbcBVQej/8nvxJM0H9PAMEcaEau3R8yAH1plAH:TDqPoBhz8vxWa9P593R8yAVp2H

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3304) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks