Overview

overview

10

Static

static

3

88a5b67273...18.dll

windows7-x64

10

88a5b67273...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    88a5b67273b8a51d3f4fbfd4b2136ae8_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240531-2xcsgagf5w

  • MD5

    88a5b67273b8a51d3f4fbfd4b2136ae8

  • SHA1

    2a51d83b5a27be37d3074f4c2bcf94a89c2d0821

  • SHA256

    98ed58ffb88ac0656e8e53ce2c177ec4ad8b237b7ce28e60dcfc85668669d487

  • SHA512

    1a618d658c2f3d988cf9bc2eac8a69d8114081ac113ede4480ccaeef290b9dad7e98fc386ed396d63ac208333fa60c3aca6c38b9bf3ef4f76a2f0ada86a30a9b

  • SSDEEP

    98304:+DqPoBhz1aRxcSUDk36SAEdhvxWa99TTKH2ORi8:+DqPe1Cxcxk3ZAEUaHTy2

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      88a5b67273b8a51d3f4fbfd4b2136ae8_JaffaCakes118

    • Size

      5.0MB

    • MD5

      88a5b67273b8a51d3f4fbfd4b2136ae8

    • SHA1

      2a51d83b5a27be37d3074f4c2bcf94a89c2d0821

    • SHA256

      98ed58ffb88ac0656e8e53ce2c177ec4ad8b237b7ce28e60dcfc85668669d487

    • SHA512

      1a618d658c2f3d988cf9bc2eac8a69d8114081ac113ede4480ccaeef290b9dad7e98fc386ed396d63ac208333fa60c3aca6c38b9bf3ef4f76a2f0ada86a30a9b

    • SSDEEP

      98304:+DqPoBhz1aRxcSUDk36SAEdhvxWa99TTKH2ORi8:+DqPe1Cxcxk3ZAEUaHTy2

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3305) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks